eve.law.harvard.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:91:67:f6:c0:3e:00:73:64:1a:33:d0:47:47:fd:73:ae:60 was issued on by Let's Encrypt.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eve.law.harvard.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:91:67:f6:c0:3e:00:73:64:1a:33:d0:47:47:fd:73:ae:60
Serial Number (int): 310815992686544792520761090420883884060256
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 30:16:a1:49:5d:a5:c6:c1:43:32:02:65:52:be:69:a7:78:6a:30:e1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5c:9b:2e:c5:17:58:4f:bd:b6:d3:4c:62:25:90:5b:a3:e2:34:68:2a
Fingerprint (sha256): 00:f8:c2:e0:83:b9:d8:98:4f:ad:da:cf:51:20:02:5c:f9:62:07:d9:d6:e2:10:d4:ad:65:9f:a5:70:9f:5a:67

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate eve.law.harvard.edu

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eve.law.harvard.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ai-hr.cyber.harvard.edu
aiandinclusion.com
aiandinclusion.org
aiandinclusionsymposium.com
aicompass.org
amberlink.org
aprendeia.org
arabnps.org
assembly.cyber.harvard.edu
berkmanassembly.org
bkmla.org
blogs.berkmancenter.org
bookanook.org
cda.wtf
cjdebtreform.com
cjdebtreform.net
cjdebtreform.org
clinic.cyber.harvard.edu
conectadosalsur.org
copyrighty.org
copyrightz.org
copyx.org
curarium.com
curricle.berkman.harvard.edu
cyberlawclinic.berkman.harvard.edu
dcrp.berkman.harvard.edu
demo.amberlink.org
digitallyconnected.org
dlrp.berkman.harvard.edu
dotplot.berkmancenter.org
edxcopyright.com
edxcopyright.org
enrollmentx.copyx.org
eve.law.harvard.edu
feedback.amberlink.org
fudcon.net
futureoftheinternet.org
gradex.copyx.org
harvardcopyright.com
harvardcopyright.org
harvardcopyrightx.com
harvardcopyrightx.org
pad.berkman.harvard.edu
pad.copyx.org
social.cyber.harvard.edu
techtopia.harvard.edu
veebrk-api.berkmancenter.org
veebrk.berkmancenter.org
wiki.copyx.org
wtfiscda.2020.bkmla.org
www.aprendeia.org
www.arabnps.org
www.berkmanassembly.org
www.bkmla.org
www.cjdebtreform.com
www.cjdebtreform.net
www.cjdebtreform.org
www.conectadosalsur.org
www.copyx.org
www.curarium.com
www.curricle.berkman.harvard.edu
www.digitallyconnected.org
www.fudcon.net
www.futureoftheinternet.org

Other certificates including the domain name harvard.edu

(limited to 100 certificates)
*.meei.harvard.edu
www.nieman.harvard.edu
cds4.cvent.com
lee.hms.harvard.edu
cvvr.hms.harvard.edu
imperva.com
iqss-sid-env-uat.herokuapp.com
takesian.hms.harvard.edu
dssg.fas.harvard.edu
scorsese.wjh.harvard.edu
geodata-proxy.lib.harvard.edu
5769623379116032-fe2.pantheonsite.io
incapsula.com
zhanglab.tch.harvard.edu
tech.seas.harvard.edu
5762637883244544-fe3.pantheonsite.io
incapsula.com
getonline.harvard.edu
archives.harvard.edu
acquia-sites.com
hub.test.lxp.huit.harvard.edu
filetransfer.harvard.edu
www.datascience.harvard.edu
nlbsp.med.harvard.edu
alumni.dce-test.upstatement.dev
neprc-vpn.hms.harvard.edu
*.hmc.harvard.edu
docker.rc.fas.harvard.edu
webmail.hsl.harvard.edu
www.hup.harvard.edu
statuspage.io
it.uahs.arizona.edu
healthinnovationnetwork.harvard.edu
sfsportal.harvard.edu
termbill.harvard.edu
admissions.emeritus.org
ordlvapexd01.med.harvard.edu
incapsula.com
cluster3.technolutions.net
hhi.harvard.edu
rmfs-blog.rmf.harvard.edu
cluster.technolutions.net
sandbox-ak150.rc.hms.harvard.edu
jdcmoveit1.joslin.harvard.edu
giftshop.metalab.harvard.edu
forerun-beta.bidmc.harvard.edu
coreapitest.tch.harvard.edu
incapsula.com
cluster3.technolutions.net
cvvr.hms.harvard.edu
jenkins.tlt.harvard.edu
worldmap.harvard.edu
omero-dev.hms.harvard.edu
www.production.sid.hmdc.harvard.edu
email.med.harvard.edu
ccib.mgh.harvard.edu
5709068098338816-fe3.pantheonsite.io
sites.sph.harvard.edu
incapsula.com
db1.mgh.harvard.edu
peerprereview.iq.harvard.edu
incapsula.com
bonescan.bidmc.harvard.edu
*.wcfia.harvard.edu
teachingpost.hbsp.harvard.edu
canvas.hms.harvard.edu
5762637883244544-fe3.pantheonsite.io
p0-univad-dc6.university.harvard.edu
coptic.share.library.harvard.edu
gc.seas.harvard.edu
fugue.arp.harvard.edu
incapsula.com
incapsula.com
edportal.harvard.edu
p2m2a.dbmi.hms.harvard.edu
pilac.law.harvard.edu
5753952654065664-fe1.pantheonsite.io
bootcamp.extension.harvard.edu
vpn.harvard.edu
prostatus.whitepages.com
sni.cloudflaressl.com
iiif.lib.harvard.edu
hds.harvard.edu
rmfvpn.rmf.harvard.edu
incapsula.com
axistv.fas.harvard.edu
vector.meei.harvard.edu
mywellnetmobiletest.tch.harvard.edu
nautilus.gse.harvard.edu
countway.harvard.edu
eve.law.harvard.edu
dlabss.harvard.edu
mail.jbcc.harvard.edu
200.hls.harvard.edu
chsi.harvard.edu
hgc.harvard.edu
vpn.dce.harvard.edu
oi.mgh.harvard.edu
wagnerlab.tch.harvard.edu
bioinformatics.sph.harvard.edu

Certificate

The complete raw certificate details for eve.law.harvard.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTGt7+tuPpfCRXZmtES8
tqfyL471UbJNpL70VASl7uPTQvDZ8CCFmgKJKCEAedyrvXglqNlNOVUno48PwSA5
O8jIrHWZ0+hnhEnaHIv2bJ/l+MBOF0Buk9zVtv5H+DKi7P4gZt93NdEPg6x7N72b
Vuu+lp/k3s47gcsMs26qGENupUHzLAhZlFHtnuRRFMRCwlfhJPf76k6U1SMwrjXM
A+OOGLHE+bhWkkbIEKGbpANsuxWPoWicLnyF93fjWdijb44LOCH5zOf6rf6OuWHB
XaeGioigDbIYapNfmUejD0gRNZtVgpfSkGlETH8pmdZHVVZXsMA8kdSJHMvPBNX6
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310815992686544792520761090420883884060256
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-18 18:36:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-19 18:36:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eve.law.harvard.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23883537484548255248580918031777165993526372316322602705614119147296810873556345434982059457164914964980310136296885051014009469101361167890236862373031851031426400870173286312175231060776538615289099692172799828657120590074204058113905613241289307930100550688519522237707961292353679025267887824749678497187048229952938555601247064153503573526124172677011161380673376302545348600196862677287033375697354230603275249234939997370444775667217202094279137174317782933692241908293148718695495059478302749504515386560615580038321622310506609335429120128296898289833254436056444163683858952632628947276432708758659258514037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3016a1495da5c6c14332026552be69a7786a30e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1354 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai-hr.cyber.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiandinclusion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiandinclusion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiandinclusionsymposium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aicompass.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amberlink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprendeia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arabnps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assembly.cyber.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkmanassembly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkmla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.berkmancenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookanook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cda.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjdebtreform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjdebtreform.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjdebtreform.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinic.cyber.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conectadosalsur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copyrighty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copyrightz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copyx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curarium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curricle.berkman.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyberlawclinic.berkman.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcrp.berkman.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.amberlink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitallyconnected.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlrp.berkman.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotplot.berkmancenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edxcopyright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edxcopyright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrollmentx.copyx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eve.law.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback.amberlink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fudcon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futureoftheinternet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gradex.copyx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvardcopyright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvardcopyright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvardcopyrightx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvardcopyrightx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pad.berkman.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pad.copyx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.cyber.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techtopia.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veebrk-api.berkmancenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veebrk.berkmancenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.copyx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtfiscda.2020.bkmla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aprendeia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arabnps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berkmanassembly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bkmla.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cjdebtreform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cjdebtreform.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cjdebtreform.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conectadosalsur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copyx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curarium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curricle.berkman.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitallyconnected.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fudcon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futureoftheinternet.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001866607052400000403004630440220409ce7d79c3e974b57d8a5669abaf3b5b3c49085eb4a26bbf52c5c38df9bfcb302201e797dd6d6e70a64ed58cb863dec8c966a0584048d5ad58f4a83716164ed4e36007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018666070520000004030047304502201995ce8ae1c60954e59da07528fcd2e0c7a5e633a3559bc31fd682c6e11c4b90022100d437cb8c14879050dc03fd73a4a1057883853469f36271182eebf9d477c50cda
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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