cert00070-azurecdn.akamaized.net

Issued by R3

About this certificate

This digital certificate with serial number 04:59:33:14:c0:f0:93:c4:a6:30:84:b7:8f:77:6b:2a:fa:5c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert00070-azurecdn.akamaized.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:59:33:14:c0:f0:93:c4:a6:30:84:b7:8f:77:6b:2a:fa:5c
Serial Number (int): 378802172770009846176062990596278451894876
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8c:8f:d0:fd:e9:9b:5e:f5:6d:55:8c:0b:22:45:79:87:c5:fe:9e:b8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ba:c6:a5:9e:01:3d:c2:a5:e5:31:22:d5:b1:ab:28:94:28:f0:80:12
Fingerprint (sha256): 90:76:e4:70:36:71:c9:69:e6:5b:6b:b6:21:05:3d:65:b4:7a:13:7e:48:8c:74:77:fc:95:a0:95:27:26:e3:da

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert00070-azurecdn.akamaized.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert00070-azurecdn.akamaized.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agriculture.newholland.com
agriculture2.newholland.com
akamai.compareyourflare.com
akeneotest.jabra.com
api.plcnext.help
app-admin.spoto-learning.spoto.cloud
assets.prelist.com.au
assets.rexroth.mam.bosch.tech
badging.cdn.carfaxcanada.com
badgingcdn.carfax.ca
beta-s.tenmax.io
blob-sandbox-cdn.manticoreplatform.com
bomgardian.downloads.restaurant365.com
cargoes-platform-prod-images-cdn.cargoes.com
cdn-bh3-asset.facelift-cloud.com
cdn-planner.facelift-cloud.com
cdn-snap-website.snap-compliance.com
cdn.cherryservers.com
cdn.cookwithbelula.com
cdn.oldschoolhousestony.co.uk
cert00070-azurecdn.akamaized.net
checkout-hml.mateusmais.com.br
clientdownloads.boardmakerservices.com
content.landdocker.com
contents.smartcity-poc.com
designercdn--wus.workflowcloud-test.com
developer.api.idemtools.com
dfds-assets.dev.doka.com
dig.fire.ca.gov
dilongrack.com
distributiontest.iqmetrix.net
download-software-installer.dev.doka.com
edge-sitelist.avt.se
egmont.valtech.dk
elearning.plcnext.help
emlfiles.impaxam.com
endpoint-game-proto-dwgus.rmg.designworksgames.com
global-cdn.vpartake.com
highlystarelec.com
hxpipefittings.com
images-bc.camis.com
incheon.wizschool.io
it-assets.conestogac.on.ca
js1.tst.applicationinsights.io
junior.akhlaquna.qa
live-storage.enetlearn.com
managed-akam.cdn.ynishiz.net
media.fillment.co
metalinductionweld.com
mit.uniteframework.io
mta-sts.i15ltd.co.uk
myinventory.sortimo-test.de
neapco.apacatalog.com
ohrm.daelim.co.kr
ohrm.dlenc.co.kr
parceiros.mobees.com.br
players-cdn-v2.vidmizer.com
pro-1w-static.onelouder.com
qa-docs.insimplify.com.au
rsprodcoupon.pspcdn.com
rtakhuat-dealgroup.rtacdn-os.com
seaheartlaser.com
serviceaudev.buildai.com.au
snapshots.playingsurface.net
snd10-icontents.777cache.com
software-installer-assets.dev.doka.com
stg-cdn.vefy01.sukurire.jp
test.huang1111.cn
testcli.buddybet.com
thirdpartylibs.mentice.com
tommy.visulon.com
travel.mygini.com
uatapi.wimpy.me
vaascdntestendpoint1.sturdyfish.com
weijiahealth.com
wem-systemtest-webconsole-us-a.systemtest.wemdevelopment.net
wms-staging.paragonbox.com
www-cdn.igrad.com
www.axellelemaire.eu
www.bds-deutschland.de
www.bepeople.tech
www.corrugated-metal-pipe.com
www.dilongrack.com
www.edengreave.co.uk
www.flyaerobatics.com
www.hftubemills.com
www.highlystarelec.com
www.hxpipefittings.com
www.metalinductionweld.com
www.mkwi2012.de
www.moap.vn
www.neomi.immo
www.pantaudrakor.com
www.pghealthindia.com
www.plumber-new-jersey.com
www.runyanpipeline.com
www.seaheartlaser.com
www.sinpopofairs.com
www.smartseohosting.jp
www.weijiahealth.com

Other certificates including the domain name cert00070-azurecdn.akamaized.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for cert00070-azurecdn.akamaized.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPfDCCDmSgAwIBAgISBFkzFMDwk8SmMIS3j3drKvpcMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjAzMDMwMjAzMzZaFw0yMjA2MDEwMjAzMzVaMCsxKTAnBgNVBAMT
IGNlcnQwMDA3MC1henVyZWNkbi5ha2FtYWl6ZWQubmV0MIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAxcVcBarW29zNtsF2AQrMQtUsclY+YEp4/9lbflsh
LH84H20f4Mdl7AaE4x2BhoGPhQ/bg1TtPzEig0+uBc7M30rHwdrEi1wzgbBlHs2R
fYqZl1Xl6S75WJqlanop5+GufSdAZIgM/Tu+syUFUV6O6ISELzpwi+zHKk3fqjbe
d5CiXAiOtZ4Qb3V1E0oj12VpZYJp/ptKZ0qdjpHscj1J35zBpIV2wL9TNIzTbB6B
GT8VBeWjt48YGQUjFcMNytDFBATLqcP0iZSPTtuJ6kEn96QMU1G1yvO74z4rZ4kx
BVdW7aD9gWduVxqlcu9No3XArZOZ0TxVvFCrcoIXWYD6SwIDAQABo4IMkTCCDI0w
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSMj9D96Zte9W1VjAsiRXmHxf6euDAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzCCCmEGA1UdEQSCClgwggpUghphZ3JpY3VsdHVy
ZS5uZXdob2xsYW5kLmNvbYIbYWdyaWN1bHR1cmUyLm5ld2hvbGxhbmQuY29tghth
a2FtYWkuY29tcGFyZXlvdXJmbGFyZS5jb22CFGFrZW5lb3Rlc3QuamFicmEuY29t
ghBhcGkucGxjbmV4dC5oZWxwgiRhcHAtYWRtaW4uc3BvdG8tbGVhcm5pbmcuc3Bv
dG8uY2xvdWSCFWFzc2V0cy5wcmVsaXN0LmNvbS5hdYIdYXNzZXRzLnJleHJvdGgu
bWFtLmJvc2NoLnRlY2iCHGJhZGdpbmcuY2RuLmNhcmZheGNhbmFkYS5jb22CFGJh
ZGdpbmdjZG4uY2FyZmF4LmNhghBiZXRhLXMudGVubWF4LmlvgiZibG9iLXNhbmRi
b3gtY2RuLm1hbnRpY29yZXBsYXRmb3JtLmNvbYImYm9tZ2FyZGlhbi5kb3dubG9h
ZHMucmVzdGF1cmFudDM2NS5jb22CLGNhcmdvZXMtcGxhdGZvcm0tcHJvZC1pbWFn
ZXMtY2RuLmNhcmdvZXMuY29tgiBjZG4tYmgzLWFzc2V0LmZhY2VsaWZ0LWNsb3Vk
LmNvbYIeY2RuLXBsYW5uZXIuZmFjZWxpZnQtY2xvdWQuY29tgiRjZG4tc25hcC13
ZWJzaXRlLnNuYXAtY29tcGxpYW5jZS5jb22CFWNkbi5jaGVycnlzZXJ2ZXJzLmNv
bYIWY2RuLmNvb2t3aXRoYmVsdWxhLmNvbYIdY2RuLm9sZHNjaG9vbGhvdXNlc3Rv
bnkuY28udWuCIGNlcnQwMDA3MC1henVyZWNkbi5ha2FtYWl6ZWQubmV0gh5jaGVj
a291dC1obWwubWF0ZXVzbWFpcy5jb20uYnKCJmNsaWVudGRvd25sb2Fkcy5ib2Fy
ZG1ha2Vyc2VydmljZXMuY29tghZjb250ZW50LmxhbmRkb2NrZXIuY29tghpjb250
ZW50cy5zbWFydGNpdHktcG9jLmNvbYInZGVzaWduZXJjZG4tLXd1cy53b3JrZmxv
d2Nsb3VkLXRlc3QuY29tghtkZXZlbG9wZXIuYXBpLmlkZW10b29scy5jb22CGGRm
ZHMtYXNzZXRzLmRldi5kb2thLmNvbYIPZGlnLmZpcmUuY2EuZ292gg5kaWxvbmdy
YWNrLmNvbYIdZGlzdHJpYnV0aW9udGVzdC5pcW1ldHJpeC5uZXSCKGRvd25sb2Fk
LXNvZnR3YXJlLWluc3RhbGxlci5kZXYuZG9rYS5jb22CFGVkZ2Utc2l0ZWxpc3Qu
YXZ0LnNlghFlZ21vbnQudmFsdGVjaC5ka4IWZWxlYXJuaW5nLnBsY25leHQuaGVs
cIIUZW1sZmlsZXMuaW1wYXhhbS5jb22CMmVuZHBvaW50LWdhbWUtcHJvdG8tZHdn
dXMucm1nLmRlc2lnbndvcmtzZ2FtZXMuY29tghdnbG9iYWwtY2RuLnZwYXJ0YWtl
LmNvbYISaGlnaGx5c3RhcmVsZWMuY29tghJoeHBpcGVmaXR0aW5ncy5jb22CE2lt
YWdlcy1iYy5jYW1pcy5jb22CFGluY2hlb24ud2l6c2Nob29sLmlvghppdC1hc3Nl
dHMuY29uZXN0b2dhYy5vbi5jYYIeanMxLnRzdC5hcHBsaWNhdGlvbmluc2lnaHRz
LmlvghNqdW5pb3IuYWtobGFxdW5hLnFhghpsaXZlLXN0b3JhZ2UuZW5ldGxlYXJu
LmNvbYIcbWFuYWdlZC1ha2FtLmNkbi55bmlzaGl6Lm5ldIIRbWVkaWEuZmlsbG1l
bnQuY2+CFm1ldGFsaW5kdWN0aW9ud2VsZC5jb22CFW1pdC51bml0ZWZyYW1ld29y
ay5pb4IUbXRhLXN0cy5pMTVsdGQuY28udWuCG215aW52ZW50b3J5LnNvcnRpbW8t
dGVzdC5kZYIVbmVhcGNvLmFwYWNhdGFsb2cuY29tghFvaHJtLmRhZWxpbS5jby5r
coIQb2hybS5kbGVuYy5jby5rcoIXcGFyY2Vpcm9zLm1vYmVlcy5jb20uYnKCG3Bs
YXllcnMtY2RuLXYyLnZpZG1pemVyLmNvbYIbcHJvLTF3LXN0YXRpYy5vbmVsb3Vk
ZXIuY29tghlxYS1kb2NzLmluc2ltcGxpZnkuY29tLmF1ghdyc3Byb2Rjb3Vwb24u
cHNwY2RuLmNvbYIgcnRha2h1YXQtZGVhbGdyb3VwLnJ0YWNkbi1vcy5jb22CEXNl
YWhlYXJ0bGFzZXIuY29tghtzZXJ2aWNlYXVkZXYuYnVpbGRhaS5jb20uYXWCHHNu
YXBzaG90cy5wbGF5aW5nc3VyZmFjZS5uZXSCHHNuZDEwLWljb250ZW50cy43Nzdj
YWNoZS5jb22CJnNvZnR3YXJlLWluc3RhbGxlci1hc3NldHMuZGV2LmRva2EuY29t
ghpzdGctY2RuLnZlZnkwMS5zdWt1cmlyZS5qcIIRdGVzdC5odWFuZzExMTEuY26C
FHRlc3RjbGkuYnVkZHliZXQuY29tghp0aGlyZHBhcnR5bGlicy5tZW50aWNlLmNv
bYIRdG9tbXkudmlzdWxvbi5jb22CEXRyYXZlbC5teWdpbmkuY29tgg91YXRhcGku
d2ltcHkubWWCI3ZhYXNjZG50ZXN0ZW5kcG9pbnQxLnN0dXJkeWZpc2guY29tghB3
ZWlqaWFoZWFsdGguY29tgjx3ZW0tc3lzdGVtdGVzdC13ZWJjb25zb2xlLXVzLWEu
c3lzdGVtdGVzdC53ZW1kZXZlbG9wbWVudC5uZXSCGndtcy1zdGFnaW5nLnBhcmFn
b25ib3guY29tghF3d3ctY2RuLmlncmFkLmNvbYIUd3d3LmF4ZWxsZWxlbWFpcmUu
ZXWCFnd3dy5iZHMtZGV1dHNjaGxhbmQuZGWCEXd3dy5iZXBlb3BsZS50ZWNogh13
d3cuY29ycnVnYXRlZC1tZXRhbC1waXBlLmNvbYISd3d3LmRpbG9uZ3JhY2suY29t
ghR3d3cuZWRlbmdyZWF2ZS5jby51a4IVd3d3LmZseWFlcm9iYXRpY3MuY29tghN3
d3cuaGZ0dWJlbWlsbHMuY29tghZ3d3cuaGlnaGx5c3RhcmVsZWMuY29tghZ3d3cu
aHhwaXBlZml0dGluZ3MuY29tghp3d3cubWV0YWxpbmR1Y3Rpb253ZWxkLmNvbYIP
d3d3Lm1rd2kyMDEyLmRlggt3d3cubW9hcC52boIOd3d3Lm5lb21pLmltbW+CFHd3
dy5wYW50YXVkcmFrb3IuY29tghV3d3cucGdoZWFsdGhpbmRpYS5jb22CGnd3dy5w
bHVtYmVyLW5ldy1qZXJzZXkuY29tghZ3d3cucnVueWFucGlwZWxpbmUuY29tghV3
d3cuc2VhaGVhcnRsYXNlci5jb22CFHd3dy5zaW5wb3BvZmFpcnMuY29tghZ3d3cu
c21hcnRzZW9ob3N0aW5nLmpwghR3d3cud2VpamlhaGVhbHRoLmNvbTBMBgNVHSAE
RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1
ACl5vvCeOTkh8FZzn2Old+W+V32cYAr4+U1dJlwlXceEAAABf027otwAAAQDAEYw
RAIgcSvR7TTd414iCojFr0DSltog4rifGdliLOoUI0Jol7wCIEKLbpTX1gLmyLXU
eH0bpGVDZsJPJS9avhnzC7R1OU2GAHUAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQAp
Bo2yCJo32RMAAAF/TbukYQAABAMARjBEAiAfkkP3hOP0N/ARoi/Qpi1mAXfnzCIg
qw/zk/IRQST88AIgavGVuB2ftWPra+LAcOPbRdId5TA/q1G2ehvuK+Jdm4EwDQYJ
KoZIhvcNAQELBQADggEBALe/TSkPrU6XwUYYr7ZjiqSzy1gNRmDpHSLGjzC075ZV
Sc4eFU0b5DxNJLZOrBttqM8rG7dsHuwXQ6al3tRDLnZTQg9WYKlMQeZIt1xFjxsG
/ZkIpKz+l08Ui7YVxZPWc/tRm0Y+n94KB4BOy/TprpmKL7ecFfuDxpJHkbic3qns
EFVabHxuYD2tawcCxRVBUXlkKHzIpC5mK45FFzbXbJ7Ry1KJ0fvL5Gi6otoSdXpe
CVFzyWuuSkL+XgAACmpHzxmTO97TlsadHbj7CYZaKHtdyVCRphLaOzrLKhZhwnpz
hARCkfswx3SGfimKBNXVhtpzWXZ0yh7nOQ2hinhJvQg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcVcBarW29zNtsF2AQrM
QtUsclY+YEp4/9lbflshLH84H20f4Mdl7AaE4x2BhoGPhQ/bg1TtPzEig0+uBc7M
30rHwdrEi1wzgbBlHs2RfYqZl1Xl6S75WJqlanop5+GufSdAZIgM/Tu+syUFUV6O
6ISELzpwi+zHKk3fqjbed5CiXAiOtZ4Qb3V1E0oj12VpZYJp/ptKZ0qdjpHscj1J
35zBpIV2wL9TNIzTbB6BGT8VBeWjt48YGQUjFcMNytDFBATLqcP0iZSPTtuJ6kEn
96QMU1G1yvO74z4rZ4kxBVdW7aD9gWduVxqlcu9No3XArZOZ0TxVvFCrcoIXWYD6
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378802172770009846176062990596278451894876
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-03 02:03:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-01 02:03:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert00070-azurecdn.akamaized.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24966267655992612683721644991802073549360482969464820856490185434630471608158871164570195088619389381392965370601144854957067188261942317635003864223242297855474398242722765906888539013305877936109323682656628749050553791728624293106495004361934058433783836912723417566833202775244649743775208413785308174090858564684777630517155614209089638215815400318525476678253149745475032274075660960962592961500089143910056759578721712287165466419570612317804457725880514432954422740828497199534927367828114496006755018491767917664517826577990640450879843232953728806629866764663509575816602942191545425455950494534343692712523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c8fd0fde99b5ef56d558c0b22457987c5fe9eb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2648 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriculture.newholland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriculture2.newholland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamai.compareyourflare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akeneotest.jabra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.plcnext.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-admin.spoto-learning.spoto.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.prelist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.rexroth.mam.bosch.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badging.cdn.carfaxcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgingcdn.carfax.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-s.tenmax.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blob-sandbox-cdn.manticoreplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bomgardian.downloads.restaurant365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargoes-platform-prod-images-cdn.cargoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-bh3-asset.facelift-cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-planner.facelift-cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-snap-website.snap-compliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cherryservers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cookwithbelula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.oldschoolhousestony.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert00070-azurecdn.akamaized.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout-hml.mateusmais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientdownloads.boardmakerservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.landdocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contents.smartcity-poc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designercdn--wus.workflowcloud-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.api.idemtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfds-assets.dev.doka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dig.fire.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dilongrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distributiontest.iqmetrix.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download-software-installer.dev.doka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-sitelist.avt.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egmont.valtech.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearning.plcnext.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emlfiles.impaxam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endpoint-game-proto-dwgus.rmg.designworksgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global-cdn.vpartake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlystarelec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hxpipefittings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-bc.camis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incheon.wizschool.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-assets.conestogac.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js1.tst.applicationinsights.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junior.akhlaquna.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-storage.enetlearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managed-akam.cdn.ynishiz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.fillment.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metalinductionweld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mit.uniteframework.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.i15ltd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinventory.sortimo-test.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neapco.apacatalog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohrm.daelim.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohrm.dlenc.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parceiros.mobees.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'players-cdn-v2.vidmizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro-1w-static.onelouder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-docs.insimplify.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsprodcoupon.pspcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtakhuat-dealgroup.rtacdn-os.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaheartlaser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceaudev.buildai.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapshots.playingsurface.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snd10-icontents.777cache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software-installer-assets.dev.doka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-cdn.vefy01.sukurire.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.huang1111.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcli.buddybet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirdpartylibs.mentice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tommy.visulon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.mygini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatapi.wimpy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaascdntestendpoint1.sturdyfish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weijiahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wem-systemtest-webconsole-us-a.systemtest.wemdevelopment.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms-staging.paragonbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cdn.igrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.axellelemaire.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bds-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepeople.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corrugated-metal-pipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dilongrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edengreave.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyaerobatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hftubemills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlystarelec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hxpipefittings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metalinductionweld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mkwi2012.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moap.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neomi.immo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pantaudrakor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pghealthindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plumber-new-jersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runyanpipeline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seaheartlaser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sinpopofairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartseohosting.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weijiahealth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017f4dbba2dc00000403004630440220712bd1ed34dde35e220a88c5af40d296da20e2b89f19d9622cea1423426897bc0220428b6e94d7d602e6c8b5d4787d1ba4654366c24f252f5abe19f30bb475394d860075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017f4dbba461000004030046304402201f9243f784e3f437f011a22fd0a62d660177e7cc2220ab0ff393f2114124fcf002206af195b81d9fb563eb6be2c070e3db45d21de5303fab51b67a1bee2be25d9b81
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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