gea.princeton.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:3f:fa:08:5b:6b:89:a2:49:68:bd:f8:35:e0:ce:00:19:2e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gea.princeton.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3f:fa:08:5b:6b:89:a2:49:68:bd:f8:35:e0:ce:00:19:2e
Serial Number (int): 283106997302840243345232776714347702393134
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2d:41:c6:6a:c2:33:9b:c8:9b:7d:2c:f8:97:df:67:1c:90:2b:7b:f0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): db:79:28:ce:5d:f9:76:6d:11:b2:09:dd:d6:e6:68:87:4d:49:bb:3d
Fingerprint (sha256): 01:75:12:01:f3:7b:41:9b:c2:81:16:4c:d4:15:de:96:c9:02:f1:b5:44:61:54:df:f9:2a:1c:f5:29:44:49:d9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gea.princeton.edu

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gea.princeton.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gea.princeton.edu
gec.princeton.edu
genderadolescencestudy.princeton.edu
generations.princeton.edu
geosciencedata.princeton.edu
glassworks.princeton.edu
globaladjoint.princeton.edu
globalenlightenment.princeton.edu
globalizationsymposium.princeton.edu
globalplantation.princeton.edu
gop.princeton.edu
gouldlab.princeton.edu
graftoniana.princeton.edu
grandcanal.princeton.edu
graphicarts.princeton.edu
greedyscience.princeton.edu
guitarclub.princeton.edu
hackazine.princeton.edu
hci.princeton.edu
hcreview.princeton.edu
hiddenchaplains.princeton.edu
highsteppers.princeton.edu
highwire.princeton.edu
hindu.princeton.edu
hiretigersblog.princeton.edu
history-hosting.princeton.edu
historyofvalue.princeton.edu
hos-attention.princeton.edu
hosa.princeton.edu
icahnthinkanddrink.princeton.edu
ifc.princeton.edu
igsw.princeton.edu
imperialreverb.princeton.edu
inch.princeton.edu
indiatrip.princeton.edu
indigenoussettler.princeton.edu
industriousnations.princeton.edu
inmediares.princeton.edu
inqilabconf.princeton.edu
insights.princeton.edu
internreflections.princeton.edu
intlpton.princeton.edu
iot.princeton.edu
ipalabwiki.princeton.edu
iranethnography.princeton.edu
isa.princeton.edu
isppu.princeton.edu
israelcomppsych.princeton.edu
itj.princeton.edu
itunconference.princeton.edu
ivgrad.princeton.edu
ivy-plus.princeton.edu
ivygss.princeton.edu
japaneseamerica.princeton.edu
jdolven.princeton.edu
jewishcultureandthecomicbook.princeton.edu
johnnash.princeton.edu
journalreviews.princeton.edu
judaicsconf.princeton.edu
juggling.princeton.edu
kgsa.princeton.edu
koach.princeton.edu
koleinu.princeton.edu
kunstkammer.princeton.edu
l2s.princeton.edu
lakesidecommittee.princeton.edu
lamb.princeton.edu
lapp.princeton.edu
latinamericana.princeton.edu
laurawooten.princeton.edu
lavs.princeton.edu
lawdiffhealth.princeton.edu
lawnparties.princeton.edu
lawrence.princeton.edu
ldssa.princeton.edu
leadindia.princeton.edu
learningbythebook.princeton.edu
legaljournal.princeton.edu
legalpluralism.princeton.edu
leonardbarkan.princeton.edu
levine.princeton.edu
libertarians.princeton.edu
libraryinstruction.princeton.edu
lightningpanel.princeton.edu
lispector.princeton.edu
lpld.princeton.edu
macros.princeton.edu
maeit.princeton.edu
marquandrarebooks.princeton.edu
mavricproject.princeton.edu
medievalblackseaproject.princeton.edu
melissalane.princeton.edu
mentalhealth.princeton.edu
mentoring.princeton.edu
mg.princeton.edu
miles.princeton.edu
minecraft.princeton.edu
moini.princeton.edu
moinilab.princeton.edu
molbio-retreat.princeton.edu

Other certificates including the domain name princeton.edu

(limited to 100 certificates)
libimages.princeton.edu
webspace.princeton.edu
5648269346603008-fe1.pantheonsite.io
svn.princeton.edu
msl.cs.princeton.edu
test-web-lws.edu.help
5729327995944960-fe3.pantheonsite.io
unsupervised.cs.princeton.edu
garlock.princeton.edu
filmstudies.princeton.edu
dss.cs.princeton.edu
aisob113w.princeton.edu
pemm.cdh.princeton.edu
us.prod.campusgroups.com
5739407210446848-fe1.pantheonsite.io
5701241594183680-fe4.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
securesendqa.princeton.edu
proteomics-r.princeton.edu
deepcompletion.cs.princeton.edu
5739407210446848-fe1.pantheonsite.io
cluster3.technolutions.net
6328556195938304-fe4.pantheonsite.io
5769720821186560-fe3.pantheonsite.io
5648269346603008-fe1.pantheonsite.io
5757334940811264-fe4.pantheonsite.io
cluster3.technolutions.net
scholar.princeton.edu
5764144745676800-fe3.pantheonsite.io
5679413765079040-fe4.pantheonsite.io
interacdome.princeton.edu
us.prod.campusgroups.com
5691420614590464-fe3.pantheonsite.io
5664902681198592-fe4.pantheonsite.io
etc2.princeton.edu
nartc.fcm.arizona.edu
5685057352105984-fe4.pantheonsite.io
5730602795925504-fe1.pantheonsite.io
nphoto.cs.princeton.edu
5648269346603008-fe1.pantheonsite.io
dss.cs.princeton.edu
middleagesforeducators.princeton.edu
faces.cs.princeton.edu
cgi.math.princeton.edu
5707324073181184-fe2.pantheonsite.io
eos.cs.princeton.edu
5665370564198400-fe2.pantheonsite.io
5675267779461120-fe4.pantheonsite.io
patents.princeton.edu
5761253830033408-fe3.pantheonsite.io
lizard.princeton.edu
5764144745676800-fe3.pantheonsite.io
swebapps.princeton.edu
pac.cs.princeton.edu
das101w.princeton.edu
banking-business-review.com
5729327995944960-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5747976207073280-fe2.pantheonsite.io
class1985.tigernet.princeton.edu
5750031617359872-fe4.pantheonsite.io
tigernet.princeton.edu
uaps2007.princeton.edu
faces.cs.princeton.edu
5659313586569216-fe4.pantheonsite.io
gea.princeton.edu
5645784439586816-fe4.pantheonsite.io
*.ezproxy.princeton.edu
phubqa-vip2.princeton.edu
5163657986048000-fe4.pantheonsite.io
5631639635886080-fe4.pantheonsite.io
vst.cs.princeton.edu
gradfutures.princeton.edu
citeak.multidevcom.uaf.edu
psrc.princeton.edu
ais324l.princeton.edu
www.design-engineering.princeton.edu
5699257587728384-fe4.pantheonsite.io
5691420614590464-fe3.pantheonsite.io
5761253830033408-fe3.pantheonsite.io
smirk.cs.princeton.edu
5739407210446848-fe1.pantheonsite.io
cchri.princeton.edu
cluster3.technolutions.net
5739407210446848-fe1.pantheonsite.io
mediacentral.princeton.edu
nxterra.ucop.edu
5769720821186560-fe3.pantheonsite.io
tableaud.princeton.edu
obj-manip.cs.princeton.edu
lineshape.cs.princeton.edu
nyao.princeton.edu
dpd.cs.princeton.edu
deepcompletion.cs.princeton.edu
banking-business-review.com
5761253830033408-fe3.pantheonsite.io
5761253830033408-fe3.pantheonsite.io
5724313353191424-fe4.pantheonsite.io
opr.princeton.edu
5769720821186560-fe3.pantheonsite.io

Certificate

The complete raw certificate details for gea.princeton.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JN61R0OEToyc9CIab1N
fFPve9HGDGrKGYI2xIZDj1g0/YpVvHizoPQmjkhcgffw0DLtIcdqKmZwWURQkKdA
P22GGARM8LLaHTGj2/AzuU5CZGNEMPcva3YNWgQk9hY+0unXuv/T4vdgT/3FbwuH
7XVLuu4g+czlbMzruU+Yy54s1vyp1W4/NraAq8T9qVUYBLtp1Uvzw2vJ4MQIXdae
NRvgRqXWpRHggyeaD/2DrO1wXAB4YY+sTuLY/Exugh8G057soGHwiQNa6myP6enc
wLAmWU0lp3ebW91iAj5jD5qhwJCSp6xNbr10ujDrq/YKK0BUm9dFH31bmQB68DQk
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283106997302840243345232776714347702393134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-29 15:09:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 15:09:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gea.princeton.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30874871418674330599856582475032938667375268619443001630863980336265595132255055319191643458111097912849518683644418268103987213994455977559607858848119842980533392049063729003920357542074988987461137585846020662431659934377838370289619002655875385799518291331039036698807426681817568646147255938646103126008097680224992782780625624378043298116774876838353123724342507002380006971784078794529182989372683470709944523843444459913842097363110245276310289984800758291731507727636966622104526315616493280025870076217545288249244971934789372294783507838417764757756356243493322858302549568740438214483485562672125977044153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d41c66ac2339bc89b7d2cf897df671c902b7bf0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2631 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gea.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gec.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genderadolescencestudy.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generations.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geosciencedata.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glassworks.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaladjoint.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalenlightenment.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalizationsymposium.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalplantation.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gop.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gouldlab.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graftoniana.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandcanal.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphicarts.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greedyscience.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guitarclub.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hackazine.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hci.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcreview.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiddenchaplains.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highsteppers.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highwire.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hindu.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiretigersblog.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'history-hosting.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historyofvalue.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hos-attention.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosa.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icahnthinkanddrink.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifc.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igsw.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperialreverb.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inch.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiatrip.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indigenoussettler.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industriousnations.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inmediares.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inqilabconf.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internreflections.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intlpton.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iot.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipalabwiki.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iranethnography.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isa.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isppu.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'israelcomppsych.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itj.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunconference.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivgrad.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivy-plus.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivygss.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japaneseamerica.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jdolven.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewishcultureandthecomicbook.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnnash.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journalreviews.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'judaicsconf.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juggling.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kgsa.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koach.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koleinu.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kunstkammer.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l2s.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakesidecommittee.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamb.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapp.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latinamericana.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laurawooten.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavs.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawdiffhealth.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawnparties.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawrence.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldssa.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadindia.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningbythebook.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legaljournal.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalpluralism.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leonardbarkan.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'levine.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertarians.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libraryinstruction.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightningpanel.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lispector.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpld.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macros.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maeit.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marquandrarebooks.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavricproject.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medievalblackseaproject.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melissalane.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentalhealth.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentoring.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mg.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miles.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minecraft.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moini.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moinilab.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molbio-retreat.princeton.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a420f06100000040300483046022100fca746c461273d6711dcf2e0d31b34fc8ff655c0c3e5f7bb7c18901b12d8a812022100febc9b8906f249d2d16a014ac9a067ea6ecfb3128df530a0f48a34d6d12aafcd007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a420f065e0000040300483046022100ce65a8e64c0708b2eb25dfc63f9c7db6429a8cd800f9730c3f6f7ec3a15809a5022100d9bbcdd6f8e2326abeb832fc8906223f77733ad7b499c3d787eb22da61c9430d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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