cdn-test.battlefields.org

Issued by R3

About this certificate

This digital certificate with serial number 03:46:08:86:f9:04:27:9d:62:1b:95:c7:04:50:db:f9:e2:ca was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cdn-test.battlefields.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:46:08:86:f9:04:27:9d:62:1b:95:c7:04:50:db:f9:e2:ca
Serial Number (int): 285167958122140919515553849449505300800202
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ed:41:f2:fa:0c:36:f2:27:49:f7:cb:69:b1:57:13:56:ea:1c:37:b1
Fingerprint (sha256): 01:5a:3a:8e:b5:7a:8d:5e:4b:e2:07:9c:8e:39:b8:32:42:8a:03:4e:0b:79:79:c5:7b:2e:0c:97:45:ce:3c:88

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cdn-test.battlefields.org

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn-test.battlefields.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn-test.battlefields.org
census.arizona.edu
cetys.udesa.edu.ar
charon.sreb.org
chat-rl.web.arizona.edu
chem674.multidevcom.uaf.edu
chns110.courseresource.yale.edu
chns120.courseresource.yale.edu
chns130.courseresource.yale.edu
citeak.multidevcom.uaf.edu
civ.ctd.northwestern.edu
clc.shawnee.edu
cleanmedia.americamagazine.org
client.pfannenbergusa.com
clinicalpolicy.hsj.co.uk
cloudapp-eu.appcelerator.com
cloudapp.appcelerator.com
cloudapp.tui.appcelerator.com
club.kjzz.org
cmmb-portal.cmmb.org
cms.legacy.com
coins.rutgers.edu
confucius.eastasian.ucsb.edu
connect.iadb.org
coreupdate.patch.com
coursepress-dev2.yale.edu
covid.usmle.org
cqn-erc.arizona.edu
crmtest.eastdunbarton.gov.uk
csc.arizona.edu
d7.cmc.edu
d7store.juilliard.edu
daniela.patch.com
dc.neilkelly.com
demeter.bavc.org
demo.govdelivery.com
dev-camdenbase.libraries.rutgers.edu
dev-cancerforum.hsj.co.uk
dev-covid19.chop.edu
dev-lp-jhubsph.edu.help
dev-mentalhealth.hsj.co.uk
dev-provider.hsj.co.uk
dev-web-degacc.edu.help
dev-web-jhucareycoop.edu.help
dev-www2.ofx.com
dev.business-services.upenn.edu
dev.cee.cornell.edu
dev.champions-speakers.co.uk
dev.cpra.cornell.edu
dev.ctd.northwestern.edu
dev.ece.cornell.edu
dev.efc.ny.gov
dev.engineering.cornell.edu
dev.hcmorg-hierarchy.isc.upenn.edu
dev.mae.cornell.edu
dev.mcny.org
dev.mse.cornell.edu
dev.nebrwesleyan.edu
dev.onlineeducation.psu.edu
dev.portfolio.yale.edu
dev.ptp.brown.edu
dev.shibtest7.isc.upenn.edu
dev1.engineering.ucsb.edu
dev1.si.umich.edu
devdr.azmex.arizona.edu
develop.madera.courts.ca.gov
dial.sralab.org
dlpe.calc.gatech.edu
dmats.spcs.stanford.edu
dmats.stanford.edu
drupal.infusionsoft.com
ds.arizona.edu
ebot200.multidevcom.uaf.edu
ecalso.berkeley.edu
ecc.nacha.org
education.ss.pacific.edu
ees.ead.lbl.gov
ehs.sph.berkeley.edu
eis.dev.cms1.asa.uw.edu
engaginghumanities.ucsb.edu
engineering.ss.pacific.edu
environment.research.yale.edu
eventsinfo.presidio.edu
expeditions.sandiegozoo.org
explore.hunterbusinessschool.edu
exploringthecomplexity.ucdavis.edu
facilities.engineering.asu.edu
faculty.gsm.ucdavis.edu
fastlane.appsembler.com

Other certificates including the domain name battlefields.org

(limited to 100 certificates)
carpepm.almonds.com
magentocloud36.map.fastly.net
calendar.sdzsafaripark.org
j3.shared.global.fastly.net
cdn-test.battlefields.org
magentocloud36.map.fastly.net
banking-business-review.com
battlefields.org
5744505470844928-fe1.pantheonsite.io
banking-business-review.com
161511-web1.vilcek.org
battlefields-staging.wm-development.com
www.battlefields.org
battlefields.org
shop.kadro.com
5744505470844928-fe1.pantheonsite.io
battlefields.org
shop.kadro.com
banking-business-review.com
161511-web1.vilcek.org
magentocloud36.map.fastly.net
shop.battlefields.org
brassunion.com
j3.shared.global.fastly.net
j3.shared.global.fastly.net
160.167.tmcapital.com
battlefields-staging.wm-development.com
magentocloud36.map.fastly.net
buyersguide.aaps.org
160.167.tmcapital.com
cdi.uga.edu
banking-business-review.com
caldesignlab.berkeley.edu
battlefields.org
banking-business-review.com
careers.whittier.edu
banking-business-review.com
banking-business-review.com
j3.shared.global.fastly.net
5744378123386880-fe2.pantheonsite.io
5744378123386880-fe2.pantheonsite.io
2.www.upenn.edu
banking-business-review.com
alldata.com
magentocloud36.map.fastly.net
160.167.tmcapital.com
magentocloud36.map.fastly.net
j3.shared.global.fastly.net
j3.shared.global.fastly.net
cci520-new.courtinnovation.org
cci520-new.courtinnovation.org
campaign.ucsc.edu
magentocloud36.map.fastly.net
5744378123386880-fe2.pantheonsite.io
caldesignlab.berkeley.edu
banking-business-review.com
5744378123386880-fe2.pantheonsite.io
banking-business-review.com
thepointalehouse.com
magentocloud36.map.fastly.net
j3.shared.global.fastly.net
161511-web1.vilcek.org
banking-business-review.com
magentocloud36.map.fastly.net
j3.shared.global.fastly.net
magentocloud36.map.fastly.net
shop.kadro.com
banking-business-review.com
magentocloud36.map.fastly.net
j3.shared.global.fastly.net
5744505470844928-fe1.pantheonsite.io
thepointalehouse.com
161511-web1.vilcek.org
hamiltonexhibition.com
banking-business-review.com
160.167.tmcapital.com
banking-business-review.com
banking-business-review.com
battlefields.org
carpepm.almonds.com
alldata.com
5744378123386880-fe2.pantheonsite.io
j3.shared.global.fastly.net
wptblog.org
5744378123386880-fe2.pantheonsite.io
161511-web1.vilcek.org
calendar.sdzsafaripark.org
battlefields.org
j3.shared.global.fastly.net
caminosseguros.iadb.org
magentocloud36.map.fastly.net
magentocloud36.map.fastly.net
calendar.sdzsafaripark.org
161511-web1.vilcek.org
magentocloud36.map.fastly.net
161511-web1.vilcek.org
boxoffice.mcny.org
magentocloud36.map.fastly.net
j3.shared.global.fastly.net
campaign.ucsc.edu

Certificate

The complete raw certificate details for cdn-test.battlefields.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMrTCCC5WgAwIBAgISA0YIhvkEJ51iG5XHBFDb+eLKMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjEwMjkxMTE2MjNaFw0yMzAxMjcxMTE2MjJaMCQxIjAgBgNVBAMT
GWNkbi10ZXN0LmJhdHRsZWZpZWxkcy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWSssaJjkc0z3PUz0HpbZQ2Et3ZZlwTsBvwsx6utsvk5sAsufQ
4ungQhtbzAvBx293/FcyYtGcPm0d9cjHhsSTFE8Qmr8H5SbPXOPWTm7YoUplIYbE
6jXvBGfJImgGAXDXYupRQhblaYR+aLEIW/hYM3hoz5RWLBgGobDZtLrTfO2bT+1Z
Y5rDHK+q27I9i+uwwHRjJOZqMK+zfUoHmPuwb1DW4qG3nLfEddr8FYIWVjv/2u69
aWoVyEMNWOXv8EsNYR4cFGPc8pK3JbPzE8wNjJ9x7MUn5FmQ3ehzbMm6DkH8t62S
NtyD3i4QZsrJe6D3L8OiBVbwCKSx8x9qBsDFAgMBAAGjggnJMIIJxTAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFDybF2nJtLoQI0AjOms2hQJs08HVMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIIIigYDVR0RBIIIgTCCCH2CGWNkbi10ZXN0LmJhdHRsZWZp
ZWxkcy5vcmeCEmNlbnN1cy5hcml6b25hLmVkdYISY2V0eXMudWRlc2EuZWR1LmFy
gg9jaGFyb24uc3JlYi5vcmeCF2NoYXQtcmwud2ViLmFyaXpvbmEuZWR1ghtjaGVt
Njc0Lm11bHRpZGV2Y29tLnVhZi5lZHWCH2NobnMxMTAuY291cnNlcmVzb3VyY2Uu
eWFsZS5lZHWCH2NobnMxMjAuY291cnNlcmVzb3VyY2UueWFsZS5lZHWCH2NobnMx
MzAuY291cnNlcmVzb3VyY2UueWFsZS5lZHWCGmNpdGVhay5tdWx0aWRldmNvbS51
YWYuZWR1ghhjaXYuY3RkLm5vcnRod2VzdGVybi5lZHWCD2NsYy5zaGF3bmVlLmVk
dYIeY2xlYW5tZWRpYS5hbWVyaWNhbWFnYXppbmUub3JnghljbGllbnQucGZhbm5l
bmJlcmd1c2EuY29tghhjbGluaWNhbHBvbGljeS5oc2ouY28udWuCHGNsb3VkYXBw
LWV1LmFwcGNlbGVyYXRvci5jb22CGWNsb3VkYXBwLmFwcGNlbGVyYXRvci5jb22C
HWNsb3VkYXBwLnR1aS5hcHBjZWxlcmF0b3IuY29tgg1jbHViLmtqenoub3JnghRj
bW1iLXBvcnRhbC5jbW1iLm9yZ4IOY21zLmxlZ2FjeS5jb22CEWNvaW5zLnJ1dGdl
cnMuZWR1ghxjb25mdWNpdXMuZWFzdGFzaWFuLnVjc2IuZWR1ghBjb25uZWN0Lmlh
ZGIub3JnghRjb3JldXBkYXRlLnBhdGNoLmNvbYIZY291cnNlcHJlc3MtZGV2Mi55
YWxlLmVkdYIPY292aWQudXNtbGUub3JnghNjcW4tZXJjLmFyaXpvbmEuZWR1ghxj
cm10ZXN0LmVhc3RkdW5iYXJ0b24uZ292LnVrgg9jc2MuYXJpem9uYS5lZHWCCmQ3
LmNtYy5lZHWCFWQ3c3RvcmUuanVpbGxpYXJkLmVkdYIRZGFuaWVsYS5wYXRjaC5j
b22CEGRjLm5laWxrZWxseS5jb22CEGRlbWV0ZXIuYmF2Yy5vcmeCFGRlbW8uZ292
ZGVsaXZlcnkuY29tgiRkZXYtY2FtZGVuYmFzZS5saWJyYXJpZXMucnV0Z2Vycy5l
ZHWCGWRldi1jYW5jZXJmb3J1bS5oc2ouY28udWuCFGRldi1jb3ZpZDE5LmNob3Au
ZWR1ghdkZXYtbHAtamh1YnNwaC5lZHUuaGVscIIaZGV2LW1lbnRhbGhlYWx0aC5o
c2ouY28udWuCFmRldi1wcm92aWRlci5oc2ouY28udWuCF2Rldi13ZWItZGVnYWNj
LmVkdS5oZWxwgh1kZXYtd2ViLWpodWNhcmV5Y29vcC5lZHUuaGVscIIQZGV2LXd3
dzIub2Z4LmNvbYIfZGV2LmJ1c2luZXNzLXNlcnZpY2VzLnVwZW5uLmVkdYITZGV2
LmNlZS5jb3JuZWxsLmVkdYIcZGV2LmNoYW1waW9ucy1zcGVha2Vycy5jby51a4IU
ZGV2LmNwcmEuY29ybmVsbC5lZHWCGGRldi5jdGQubm9ydGh3ZXN0ZXJuLmVkdYIT
ZGV2LmVjZS5jb3JuZWxsLmVkdYIOZGV2LmVmYy5ueS5nb3aCG2Rldi5lbmdpbmVl
cmluZy5jb3JuZWxsLmVkdYIiZGV2LmhjbW9yZy1oaWVyYXJjaHkuaXNjLnVwZW5u
LmVkdYITZGV2Lm1hZS5jb3JuZWxsLmVkdYIMZGV2Lm1jbnkub3JnghNkZXYubXNl
LmNvcm5lbGwuZWR1ghRkZXYubmVicndlc2xleWFuLmVkdYIbZGV2Lm9ubGluZWVk
dWNhdGlvbi5wc3UuZWR1ghZkZXYucG9ydGZvbGlvLnlhbGUuZWR1ghFkZXYucHRw
LmJyb3duLmVkdYIbZGV2LnNoaWJ0ZXN0Ny5pc2MudXBlbm4uZWR1ghlkZXYxLmVu
Z2luZWVyaW5nLnVjc2IuZWR1ghFkZXYxLnNpLnVtaWNoLmVkdYIXZGV2ZHIuYXpt
ZXguYXJpem9uYS5lZHWCHGRldmVsb3AubWFkZXJhLmNvdXJ0cy5jYS5nb3aCD2Rp
YWwuc3JhbGFiLm9yZ4IUZGxwZS5jYWxjLmdhdGVjaC5lZHWCF2RtYXRzLnNwY3Mu
c3RhbmZvcmQuZWR1ghJkbWF0cy5zdGFuZm9yZC5lZHWCF2RydXBhbC5pbmZ1c2lv
bnNvZnQuY29tgg5kcy5hcml6b25hLmVkdYIbZWJvdDIwMC5tdWx0aWRldmNvbS51
YWYuZWR1ghNlY2Fsc28uYmVya2VsZXkuZWR1gg1lY2MubmFjaGEub3JnghhlZHVj
YXRpb24uc3MucGFjaWZpYy5lZHWCD2Vlcy5lYWQubGJsLmdvdoIUZWhzLnNwaC5i
ZXJrZWxleS5lZHWCF2Vpcy5kZXYuY21zMS5hc2EudXcuZWR1ghtlbmdhZ2luZ2h1
bWFuaXRpZXMudWNzYi5lZHWCGmVuZ2luZWVyaW5nLnNzLnBhY2lmaWMuZWR1gh1l
bnZpcm9ubWVudC5yZXNlYXJjaC55YWxlLmVkdYIXZXZlbnRzaW5mby5wcmVzaWRp
by5lZHWCG2V4cGVkaXRpb25zLnNhbmRpZWdvem9vLm9yZ4IgZXhwbG9yZS5odW50
ZXJidXNpbmVzc3NjaG9vbC5lZHWCImV4cGxvcmluZ3RoZWNvbXBsZXhpdHkudWNk
YXZpcy5lZHWCHmZhY2lsaXRpZXMuZW5naW5lZXJpbmcuYXN1LmVkdYIXZmFjdWx0
eS5nc20udWNkYXZpcy5lZHWCF2Zhc3RsYW5lLmFwcHNlbWJsZXIuY29tMEwGA1Ud
IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G
CSqGSIb3DQEBCwUAA4IBAQA5EPuLwx1tBvVA17+DRGJJo4HYrS/Zc25tY9YG87Mc
TX3C0ch33LQ/ceZgmYyHEECCs6UqO4qE9euSwGl7UEPELxjZGwAf3njsTknGMvZ0
GilNOv8nzvMNfmpgkoWq3u8XbLL6Lp3vhimBUSi9hLmNXqn9snXCLXYxzCI9z2Kc
7Z7FezyTdGB7xUbi7aXU1ZNDGXagOOba08+17pJib/na1vRnV8ME7gEs/P81YRWb
KG70ZNTt17MfQK8KgoOn0dBgPWaogeESLQ73v5YVUTxqgkf/G4QpV6/gTsH/x/lO
gkQUfcrdzyCdbbwgiBC7MJgyp1A6dsVjVteXce7HrKyv
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285167958122140919515553849449505300800202
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-29 11:16:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-27 11:16:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn-test.battlefields.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2177 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-test.battlefields.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'census.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetys.udesa.edu.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charon.sreb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat-rl.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chem674.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chns110.courseresource.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chns120.courseresource.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chns130.courseresource.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citeak.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civ.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clc.shawnee.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanmedia.americamagazine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.pfannenbergusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicalpolicy.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudapp-eu.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudapp.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudapp.tui.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'club.kjzz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmmb-portal.cmmb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.legacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coins.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confucius.eastasian.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.iadb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coreupdate.patch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coursepress-dev2.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid.usmle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cqn-erc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmtest.eastdunbarton.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd7.cmc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd7store.juilliard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daniela.patch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.neilkelly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demeter.bavc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-camdenbase.libraries.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-cancerforum.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-covid19.chop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-lp-jhubsph.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-mentalhealth.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-provider.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-web-degacc.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-web-jhucareycoop.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www2.ofx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.business-services.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cee.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.champions-speakers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cpra.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ece.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.efc.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.engineering.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.hcmorg-hierarchy.isc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.portfolio.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ptp.brown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.shibtest7.isc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.engineering.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.si.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devdr.azmex.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop.madera.courts.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dial.sralab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlpe.calc.gatech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.spcs.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drupal.infusionsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebot200.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecalso.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecc.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ees.ead.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehs.sph.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eis.dev.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engaginghumanities.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engineering.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'environment.research.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventsinfo.presidio.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expeditions.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.hunterbusinessschool.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploringthecomplexity.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facilities.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faculty.gsm.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastlane.appsembler.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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