dns1.wavecast.io

Issued by R3

About this certificate

This digital certificate with serial number 03:d1:be:50:0e:a3:ef:e0:cc:40:34:f1:24:65:db:37:b4:d7 was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dns1.wavecast.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d1:be:50:0e:a3:ef:e0:cc:40:34:f1:24:65:db:37:b4:d7
Serial Number (int): 332708841481646859228005534349870967010519
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e4:fb:2e:6e:05:51:cc:1d:66:ee:8e:4b:c7:95:35:2e:23:d7:23:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 01:bd:60:19:2b:df:bb:6e:ed:58:d5:d5:12:74:34:ce:9e:34:e0:ec
Fingerprint (sha256): af:06:94:ce:ae:10:5c:5e:99:e1:db:d3:91:e1:bf:3b:b9:05:a7:63:42:2a:7b:e7:39:09:5a:14:57:ed:f3:8c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dns1.wavecast.io

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dns1.wavecast.io

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beyondthebreach.nccgroup.com
chugaiwebinar.trickbox.live
cit-world.com
citynationplace.com
community.ionanalytics.com
creditforum.moodys.io
debtexplorer.whitecase.com
digitalminds2020showcase.com
dns1.wavecast.io
eibcgrandfinal.trickbox.live
elsevier.trickbox.live
events.activistmonitor.com
events.acuris.com
events.avcjforum.com
events.creditflux.com
events.dealreporter.com
events.debtwire.com
events.inframationgroup.com
events.mergermarket.com
events.moodys.com
events.parr-global.com
events.perfectinfo.com
events.unquote.com
executive.moodys.io
exponent2020agm.com
fondationbeyelerxmuse.live
hub.bareska.com
hub.mybemfola.co.uk
ilsweek.com
insiderreconnect.com
insight.autocarbusiness.com
insight.campaignlive.co.uk
insight.managementtoday.co.uk
insight.performancemarketingworld.com
insight.scmagazineuk.com
investorconference.staffordcp.com
live.insuranceinsider.com
live.marketforce.eu.com
live.moodys.io
members.avcj.com
members.creditflux.com
members.mergermarket.com
mergers.whitecase.com
outlooks.moodys.io
pminsight.cipd.co.uk
publicsector2021.nsmg.live
sgg-live.com
shl-transform.live
smart-communications.trickbox.live
softpower.brandfinance.com
stream.marketforcelive.com
trading-risk-live.com
wavecastpro.com
webinars.windpowermonthly.com
windpowermonthlyinsight.com
www.avcjforum.com
www.britishprivateequityawards.com
www.cit-world.com
www.citynationplace.com
www.exponent2020agm.com
www.goodworktv.co.uk
www.ilsweek.com
www.inframation-events.com
www.insiderreconnect.com
www.malaysianpeforum.com
www.mx3barcelona.com
www.mx3hub.com
www.mybemfola.co.uk
www.no-4.co.uk
www.sgg-live.com
www.supplymanagementinsider.com
www.trading-risk-live.com
www.wavecastpro.com
www.windpowermonthlyinsight.com
youngmarketeraward2020.imghub.co.uk

Other certificates including the domain name wavecast.io

(limited to 100 certificates)
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
dns1.wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
papillon.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
test.wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io

Certificate

The complete raw certificate details for dns1.wavecast.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKRzCCCS+gAwIBAgISA9G+UA6j7+DMQDTxJGXbN7TXMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMjEwNzE4NDlaFw0yNDAxMTkwNzE4NDhaMBsxGTAXBgNVBAMT
EGRuczEud2F2ZWNhc3QuaW8wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQXii2l
T/NrgbMlIz6hV7+rgP86kwnffjYoK/pfsC9Y/j5Pc8kciI+2eM9qG98IYMtGc/VR
GbBkxP3xoBRvjnbHo4IINzCCCDMwDgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTk+y5u
BVHMHWbujkvHlTUuI9cj1DAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTC
xjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNy
Lm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCCBzEGA1Ud
EQSCBygwggckghxiZXlvbmR0aGVicmVhY2gubmNjZ3JvdXAuY29tghtjaHVnYWl3
ZWJpbmFyLnRyaWNrYm94LmxpdmWCDWNpdC13b3JsZC5jb22CE2NpdHluYXRpb25w
bGFjZS5jb22CGmNvbW11bml0eS5pb25hbmFseXRpY3MuY29tghVjcmVkaXRmb3J1
bS5tb29keXMuaW+CGmRlYnRleHBsb3Jlci53aGl0ZWNhc2UuY29tghxkaWdpdGFs
bWluZHMyMDIwc2hvd2Nhc2UuY29tghBkbnMxLndhdmVjYXN0LmlvghxlaWJjZ3Jh
bmRmaW5hbC50cmlja2JveC5saXZlghZlbHNldmllci50cmlja2JveC5saXZlghpl
dmVudHMuYWN0aXZpc3Rtb25pdG9yLmNvbYIRZXZlbnRzLmFjdXJpcy5jb22CFGV2
ZW50cy5hdmNqZm9ydW0uY29tghVldmVudHMuY3JlZGl0Zmx1eC5jb22CF2V2ZW50
cy5kZWFscmVwb3J0ZXIuY29tghNldmVudHMuZGVidHdpcmUuY29tghtldmVudHMu
aW5mcmFtYXRpb25ncm91cC5jb22CF2V2ZW50cy5tZXJnZXJtYXJrZXQuY29tghFl
dmVudHMubW9vZHlzLmNvbYIWZXZlbnRzLnBhcnItZ2xvYmFsLmNvbYIWZXZlbnRz
LnBlcmZlY3RpbmZvLmNvbYISZXZlbnRzLnVucXVvdGUuY29tghNleGVjdXRpdmUu
bW9vZHlzLmlvghNleHBvbmVudDIwMjBhZ20uY29tghpmb25kYXRpb25iZXllbGVy
eG11c2UubGl2ZYIPaHViLmJhcmVza2EuY29tghNodWIubXliZW1mb2xhLmNvLnVr
ggtpbHN3ZWVrLmNvbYIUaW5zaWRlcnJlY29ubmVjdC5jb22CG2luc2lnaHQuYXV0
b2NhcmJ1c2luZXNzLmNvbYIaaW5zaWdodC5jYW1wYWlnbmxpdmUuY28udWuCHWlu
c2lnaHQubWFuYWdlbWVudHRvZGF5LmNvLnVrgiVpbnNpZ2h0LnBlcmZvcm1hbmNl
bWFya2V0aW5nd29ybGQuY29tghhpbnNpZ2h0LnNjbWFnYXppbmV1ay5jb22CIWlu
dmVzdG9yY29uZmVyZW5jZS5zdGFmZm9yZGNwLmNvbYIZbGl2ZS5pbnN1cmFuY2Vp
bnNpZGVyLmNvbYIXbGl2ZS5tYXJrZXRmb3JjZS5ldS5jb22CDmxpdmUubW9vZHlz
LmlvghBtZW1iZXJzLmF2Y2ouY29tghZtZW1iZXJzLmNyZWRpdGZsdXguY29tghht
ZW1iZXJzLm1lcmdlcm1hcmtldC5jb22CFW1lcmdlcnMud2hpdGVjYXNlLmNvbYIS
b3V0bG9va3MubW9vZHlzLmlvghRwbWluc2lnaHQuY2lwZC5jby51a4IacHVibGlj
c2VjdG9yMjAyMS5uc21nLmxpdmWCDHNnZy1saXZlLmNvbYISc2hsLXRyYW5zZm9y
bS5saXZlgiJzbWFydC1jb21tdW5pY2F0aW9ucy50cmlja2JveC5saXZlghpzb2Z0
cG93ZXIuYnJhbmRmaW5hbmNlLmNvbYIac3RyZWFtLm1hcmtldGZvcmNlbGl2ZS5j
b22CFXRyYWRpbmctcmlzay1saXZlLmNvbYIPd2F2ZWNhc3Rwcm8uY29tgh13ZWJp
bmFycy53aW5kcG93ZXJtb250aGx5LmNvbYIbd2luZHBvd2VybW9udGhseWluc2ln
aHQuY29tghF3d3cuYXZjamZvcnVtLmNvbYIid3d3LmJyaXRpc2hwcml2YXRlZXF1
aXR5YXdhcmRzLmNvbYIRd3d3LmNpdC13b3JsZC5jb22CF3d3dy5jaXR5bmF0aW9u
cGxhY2UuY29tghd3d3cuZXhwb25lbnQyMDIwYWdtLmNvbYIUd3d3Lmdvb2R3b3Jr
dHYuY28udWuCD3d3dy5pbHN3ZWVrLmNvbYIad3d3LmluZnJhbWF0aW9uLWV2ZW50
cy5jb22CGHd3dy5pbnNpZGVycmVjb25uZWN0LmNvbYIYd3d3Lm1hbGF5c2lhbnBl
Zm9ydW0uY29tghR3d3cubXgzYmFyY2Vsb25hLmNvbYIOd3d3Lm14M2h1Yi5jb22C
E3d3dy5teWJlbWZvbGEuY28udWuCDnd3dy5uby00LmNvLnVrghB3d3cuc2dnLWxp
dmUuY29tgh93d3cuc3VwcGx5bWFuYWdlbWVudGluc2lkZXIuY29tghl3d3cudHJh
ZGluZy1yaXNrLWxpdmUuY29tghN3d3cud2F2ZWNhc3Rwcm8uY29tgh93d3cud2lu
ZHBvd2VybW9udGhseWluc2lnaHQuY29tgiN5b3VuZ21hcmtldGVyYXdhcmQyMDIw
LmltZ2h1Yi5jby51azATBgNVHSAEDDAKMAgGBmeBDAECATATBgorBgEEAdZ5AgQD
AQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq/Xas4gYJL4AYLkZdoONHEWHUIMj
xgueLSFLCpAWlVyCinxDJuACPI/fEIKkSXLo5DFDBkjd0C9TSa7anxH5Gb1NjNNe
dJBRv2zagNs5i8smLeMMX5obia/grNBewzkU1BJkXJM7MUgAr6ui6NB1oFGXDNSR
4MxhAE5IKffISIkV5TAKcNKZ4LxFnEcA0W67YylhqFm2+/VRgoYFAZ1Oc6RoVRvd
APceJnwee+eahgPNV1NjmJpWgRlmCNE6rBLnxdCPs41TbahbvpPN/r1ws90eRumk
MOR0gNn9dySi3N6KrWZgQNwhEEL/awCeAs+CdG2oHDUr6rbYX+93L3hEog==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEF4otpU/za4GzJSM+oVe/q4D/OpMJ
3342KCv6X7AvWP4+T3PJHIiPtnjPahvfCGDLRnP1URmwZMT98aAUb452xw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332708841481646859228005534349870967010519
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-21 07:18:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 07:18:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dns1.wavecast.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004178a2da54ff36b81b325233ea157bfab80ff3a9309df7e36282bfa5fb02f58fe3e4f73c91c888fb678cf6a1bdf0860cb4673f55119b064c4fdf1a0146f8e76c7
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e4fb2e6e0551cc1d66ee8e4bc795352e23d723d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1832 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyondthebreach.nccgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chugaiwebinar.trickbox.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cit-world.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citynationplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.ionanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditforum.moodys.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debtexplorer.whitecase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalminds2020showcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dns1.wavecast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eibcgrandfinal.trickbox.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elsevier.trickbox.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.activistmonitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.acuris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.avcjforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.creditflux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.dealreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.debtwire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.inframationgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.mergermarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.moodys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.parr-global.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.perfectinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.unquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'executive.moodys.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exponent2020agm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fondationbeyelerxmuse.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.bareska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.mybemfola.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilsweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insiderreconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight.autocarbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight.campaignlive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight.managementtoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight.performancemarketingworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight.scmagazineuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorconference.staffordcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.insuranceinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.marketforce.eu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.moodys.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.avcj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.creditflux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.mergermarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mergers.whitecase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlooks.moodys.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pminsight.cipd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicsector2021.nsmg.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgg-live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shl-transform.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart-communications.trickbox.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softpower.brandfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream.marketforcelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trading-risk-live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavecastpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webinars.windpowermonthly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windpowermonthlyinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avcjforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.britishprivateequityawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cit-world.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citynationplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exponent2020agm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodworktv.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilsweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inframation-events.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insiderreconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malaysianpeforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mx3barcelona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mx3hub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybemfola.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.no-4.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgg-live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supplymanagementinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trading-risk-live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wavecastpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windpowermonthlyinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngmarketeraward2020.imghub.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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