www.ng.id

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e1:3f:02:f7:7f:2d:54:30:26:8e:f1:d0:44:c9:de:89:fe was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ng.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e1:3f:02:f7:7f:2d:54:30:26:8e:f1:d0:44:c9:de:89:fe
Serial Number (int): 337984147120651238332649023527191163341310
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 71:ea:8f:41:c7:19:63:27:a4:54:96:65:b5:d5:18:5a:04:aa:94:2f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 78:f9:74:ee:4b:0e:fb:f8:d6:aa:8e:c1:77:7e:7d:e9:7d:14:06:0c
Fingerprint (sha256): 92:cb:93:7c:b4:bf:4d:09:cf:72:c1:50:82:71:5f:c8:71:d1:eb:bd:89:08:4d:4c:69:49:2e:42:33:9e:3d:37

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ng.id

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ng.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aiani.me
although.id
ap.id
apparent.id
bag.id
biological.id
calculate.id
commission.id
correspondent.id
defendant.id
do-themath.org
drug.id
earn.id
eo.id
friendly.id
fs.id
ha.id
hand.id
holo.bible
hp.id
ig.id
ii.id
imagewire.org
increasingly.id
interpret.id
iu.id
jack.bible
jc.id
jm.id
jt.id
meanwhile.id
medication.id
mercuryisrising.org
nationaldomainnameassociation.org
ng.id
nh.id
op.id
percentage.id
po.id
purpose.exchange
rn.id
shoe.id
successfully.id
sv.id
violation.id
vl.id
wire.id
www.aiani.me
www.although.id
www.ap.id
www.apparent.id
www.bag.id
www.biological.id
www.calculate.id
www.commission.id
www.correspondent.id
www.defendant.id
www.do-themath.org
www.drug.id
www.earn.id
www.eo.id
www.friendly.id
www.fs.id
www.ha.id
www.hand.id
www.holo.bible
www.hp.id
www.ig.id
www.ii.id
www.imagewire.org
www.increasingly.id
www.interpret.id
www.iu.id
www.jack.bible
www.jc.id
www.jm.id
www.jt.id
www.meanwhile.id
www.medication.id
www.mercuryisrising.org
www.nationaldomainnameassociation.org
www.ng.id
www.nh.id
www.op.id
www.percentage.id
www.po.id
www.purpose.exchange
www.rn.id
www.shoe.id
www.successfully.id
www.sv.id
www.violation.id
www.vl.id
www.wire.id
www.xi.id
www.yd.id
www.yo.id
xi.id
yd.id
yo.id

Other certificates including the domain name ng.id

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ng.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32DpMmVUT9xwso17TCHw
ELsgmVXNgV3iCSElsS+qnpKQshUHvk6d9aVFiBWT4s+5zXjdMTwdam4HH5QLUe69
r2DBTuMseR/Q+5zQ+F3Xt+4sMhOGrTSWrRWP0wgsdvYBVG7Bb9CYi1m3pSBeRdvZ
kKNHrmgsKLF14WEEnNM7mWQIuDZuOokvuFDlTpsygiRFHl08ZSxZUX1Yg2w67oig
se+hOny7uIlxis4V7lDHX+YPjLyCnG12G9erhR8sSMDmfNjLnhQkfzhjchmWVzMS
SoTu23iXggWQmfIA2UP6WW/kcQk2PovQbKCD/mlD5fD8s4ZKExxGi+ZHoXmbrfYW
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337984147120651238332649023527191163341310
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 14:25:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-22 14:25:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ng.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28198930565765528536897886819280752378790473953941539655586092220991378247902845954432700980273023622382171984289519698602756265696837659664265538482579230672330136499186063354807456777083678074894018412731191092271423683243692461409414421914546325967021265324080156110321743726837339823092695063279136406749084412853843171589044724478666254850412637539182121898418157006301590673578106966134970378411692123855150776335614617226073151091803805019709193090652000482368053717372686056778742836669696411972156859028598478790555325070581077922451035516287640845608522469760640187358595133082596804714746345802672056440321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71ea8f41c7196327a4549665b5d5185a04aa942f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1324 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiani.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'although.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apparent.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bag.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biological.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calculate.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commission.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correspondent.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defendant.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'do-themath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drug.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earn.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eo.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendly.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ha.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hand.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holo.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hp.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ig.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ii.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagewire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'increasingly.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interpret.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iu.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jack.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jc.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jm.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jt.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meanwhile.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medication.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercuryisrising.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaldomainnameassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ng.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nh.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'op.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'percentage.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'po.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purpose.exchange'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rn.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoe.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'successfully.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'violation.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vl.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wire.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiani.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.although.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ap.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apparent.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bag.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biological.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calculate.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commission.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.correspondent.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defendant.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.do-themath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drug.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earn.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eo.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendly.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fs.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ha.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hand.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holo.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hp.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ig.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ii.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imagewire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.increasingly.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interpret.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iu.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jack.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jc.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jm.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jt.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meanwhile.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medication.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercuryisrising.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaldomainnameassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ng.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nh.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.op.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.percentage.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.po.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purpose.exchange'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rn.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoe.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.successfully.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sv.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.violation.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vl.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wire.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xi.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yd.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yo.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xi.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yd.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yo.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001710d25cfcd0000040300483046022100e89203cfeecb6107c83b83425998a4e3a65bf165f400c6ee5b2fe8e55302ae3f022100c0784f1e409ecd9403fa2bb929bebabe677ef8c000d451ba803488a17ef741e70075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001710d25d0030000040300463044022008ce2c89e827f9b205f65c9dcc7b61e2ae405f20b2a9517ded224933b34f2c8a02203ca5d3081b5a8d6d461579aac78c640e8ed41b72c95d22c86b43dba4d06ee11b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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