chns120.courseresource.yale.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:e0:2e:b9:05:fe:a4:cc:d7:4d:7a:30:a9:39:4d:59:a7:4f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chns120.courseresource.yale.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e0:2e:b9:05:fe:a4:cc:d7:4d:7a:30:a9:39:4d:59:a7:4f
Serial Number (int): 424734499101643141951653757019543895123791
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6b:e9:fd:eb:9d:91:da:da:3b:d4:48:a2:72:11:96:70:4c:39:79:9c
Fingerprint (sha256): 02:4d:cb:e1:5e:c8:41:50:20:bc:1a:1e:48:de:58:83:f9:65:30:76:b5:49:52:26:45:55:31:ea:3b:04:27:8e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate chns120.courseresource.yale.edu

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chns120.courseresource.yale.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chns120.courseresource.yale.edu
chns130.courseresource.yale.edu
chns168.courseresource.yale.edu
citeak.multidevcom.uaf.edu
citrix.remote.naylor.com
civ.ctd.northwestern.edu
clc.shawnee.edu
cleanmedia.americamagazine.org
client.pfannenbergusa.com
clinicalpolicy.hsj.co.uk
cloudapp-eu.appcelerator.com
cloudapp.appcelerator.com
cloudapp.tui.appcelerator.com
club.kjzz.org
cmmb-portal.cmmb.org
cms.legacy.com
coins.rutgers.edu
confucius.eastasian.ucsb.edu
connect.iadb.org
coreupdate.patch.com
coursepress-dev2.yale.edu
covid.usmle.org
cqn-erc.arizona.edu
crmtest.eastdunbarton.gov.uk
csc.arizona.edu
d7.cmc.edu
d7store.juilliard.edu
daniela.patch.com
dc.neilkelly.com
demeter.bavc.org
demo.govdelivery.com
dev-camdenbase.libraries.rutgers.edu
dev-covid19.chop.edu
dev-lp-jhubsph.edu.help
dev-mentalhealth.hsj.co.uk
dev-provider.hsj.co.uk
dev-web-degacc.edu.help
dev-web-jhucareycoop.edu.help
dev-www2.ofx.com
dev.aspcapro.org
dev.business-services.upenn.edu
dev.cee.cornell.edu
dev.champions-speakers.co.uk
dev.cpra.cornell.edu
dev.ctd.northwestern.edu
dev.ece.cornell.edu
dev.efc.ny.gov
dev.embody.yale.edu
dev.engineering.cornell.edu
dev.hcmorg-hierarchy.isc.upenn.edu
dev.mae.cornell.edu
dev.mcny.org
dev.mse.cornell.edu
dev.nebrwesleyan.edu
dev.onlineeducation.psu.edu
dev.portfolio.yale.edu
dev.ptp.brown.edu
dev.shibtest7.isc.upenn.edu
dev1.engineering.ucsb.edu
dev1.si.umich.edu
devdr.azmex.arizona.edu
develop.madera.courts.ca.gov
dial.sralab.org
dlpe.calc.gatech.edu
dmats.spcs.stanford.edu
dmats.stanford.edu
drupal.infusionsoft.com
ds.arizona.edu
ebot200.multidevcom.uaf.edu
ecalso.berkeley.edu
ecc.nacha.org
education.ss.pacific.edu
ees.ead.lbl.gov
ehs.sph.berkeley.edu
eis.dev.cms1.asa.uw.edu
engaginghumanities.ucsb.edu
engineering.ss.pacific.edu
environment.research.yale.edu
eventsinfo.presidio.edu
expeditions.sandiegozoo.org
explore.hunterbusinessschool.edu
exploringthecomplexity.ucdavis.edu
faculty.gsm.ucdavis.edu
fastlane.appsembler.com
fecc.nacha.org
first.wordsesh.org
flash.wxxi.org
flta.cli.asu.edu
forum.earthjustice.org
fukushima.sfsu.edu
fw.earthjustice.org
gem.business.ucdenver.edu
get.pima.edu
giftcertificates.cookbookcooks.com
gil.engineering.asu.edu
gis.archbalt.org
giveto.shawnee.edu
gpf.nacha.org
gsefilms.gse.upenn.edu
gtpe.pe.gatech.edu

Other certificates including the domain name yale.edu

(limited to 100 certificates)
5648269346603008-fe1.pantheonsite.io
ar2017hr.yale.edu
cds4.cvent.com
5730192894984192-fe4.pantheonsite.io
5732312192909312-fe3.pantheonsite.io
*.drama.yale.edu
stm.yale.edu
5651276360581120-fe3.pantheonsite.io
5640887774216192-fe4.pantheonsite.io
5635220564869120-fe4.pantheonsite.io
5769623379116032-fe2.pantheonsite.io
carpepm.almonds.com
5759522421342208-fe1.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
*.dkw2.yale.edu
5755553334689792-fe2.pantheonsite.io
libapp-test.library.yale.edu
coupdebrass.sites.yale.edu
us.prod.campusgroups.com
5648554290839552-fe1.pantheonsite.io
www.yiorecruiting.invest.yale.edu
www.sustainablefood.yale.edu
5633267831144448-fe1.pantheonsite.io
quarantine-tst.its.yale.edu
b3.shared.global.fastly.net
5649648836411392-fe3.pantheonsite.io
5732808731394048-fe3.pantheonsite.io
5723088213770240-fe3.pantheonsite.io
5724466092965888-fe4.pantheonsite.io
6328556195938304-fe4.pantheonsite.io
cluster.technolutions.net
5651276360581120-fe3.pantheonsite.io
yul-pres-tapi.library.yale.edu
5648269346603008-fe1.pantheonsite.io
tst.studyabroad.yale.edu
5714468482842624-fe4.pantheonsite.io
comitalab.yale.edu
ris-store.its.yale.edu
cluster3.technolutions.net
infoed-patch.its.yale.edu
5677090456207360-fe2.pantheonsite.io
5688290254520320-fe2.pantheonsite.io
5720929187397632-fe3.pantheonsite.io
cohoc-dev.its.yale.edu
us.prod.campusgroups.com
5643365030821888-fe1.pantheonsite.io
5745189578604544-fe1.pantheonsite.io
nartc.fcm.arizona.edu
rotc.yale.edu
5680876067225600-fe2.pantheonsite.io
calendar.sdzsafaripark.org
5746821397741568-fe3.pantheonsite.io
apply.nursing.yale.edu
5746821397741568-fe3.pantheonsite.io
application.mam.som.yale.edu
5633267831144448-fe1.pantheonsite.io
5648269346603008-fe1.pantheonsite.io
*.profile.yale.edu
sa105gl.wpc.edgecastcdn.net
5629935204958208-fe2.pantheonsite.io
5677303661068288-fe3.pantheonsite.io
5723088213770240-fe3.pantheonsite.io
5740315998683136-fe1.pantheonsite.io
tls.automattic.com
5648554290839552-fe1.pantheonsite.io
5743114304094208-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5640887774216192-fe4.pantheonsite.io
5719378301550592-fe3.pantheonsite.io
6208428913459200-fe4.pantheonsite.io
www.yhpstudentwaiver.yale.edu
effy.yale.edu
5766466041282560-fe4.pantheonsite.io
orbit.astronomy.yale.edu
yh-emposrp.yu.yale.edu
tst.cce.yalecollege.yale.edu
5755812509122560-fe2.pantheonsite.io
ebiz-vendor.yale.edu
application.mam.som.yale.edu
identity.yale.edu
5769623379116032-fe2.pantheonsite.io
cdrom-access.library.yale.edu
5740240702537728-fe2.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
cds4.cvent.com
uconnectlabs.com
5704837555552256-fe2.pantheonsite.io
5759522421342208-fe1.pantheonsite.io
5734616174428160-fe1.pantheonsite.io
cds4.cvent.com
ask.library.yale.edu
banking-business-review.com
yportal.yale.edu
yped.med.yale.edu
5672463165816832-fe3.pantheonsite.io
cdn-test.battlefields.org
library.medicine.yale.edu
tools1.medicine.yale.edu
bmsweb-hdev.yale.edu

Certificate

The complete raw certificate details for chns120.courseresource.yale.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424734499101643141951653757019543895123791
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-26 16:21:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-24 16:21:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chns120.courseresource.yale.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2379 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chns120.courseresource.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chns130.courseresource.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chns168.courseresource.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citeak.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrix.remote.naylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civ.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clc.shawnee.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanmedia.americamagazine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.pfannenbergusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicalpolicy.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudapp-eu.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudapp.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudapp.tui.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'club.kjzz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmmb-portal.cmmb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.legacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coins.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confucius.eastasian.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.iadb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coreupdate.patch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coursepress-dev2.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid.usmle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cqn-erc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmtest.eastdunbarton.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd7.cmc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd7store.juilliard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daniela.patch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.neilkelly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demeter.bavc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-camdenbase.libraries.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-covid19.chop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-lp-jhubsph.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-mentalhealth.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-provider.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-web-degacc.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-web-jhucareycoop.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www2.ofx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.aspcapro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.business-services.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cee.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.champions-speakers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cpra.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ece.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.efc.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.embody.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.engineering.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.hcmorg-hierarchy.isc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.portfolio.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ptp.brown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.shibtest7.isc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.engineering.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.si.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devdr.azmex.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop.madera.courts.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dial.sralab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlpe.calc.gatech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.spcs.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drupal.infusionsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebot200.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecalso.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecc.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ees.ead.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehs.sph.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eis.dev.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engaginghumanities.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engineering.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'environment.research.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventsinfo.presidio.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expeditions.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.hunterbusinessschool.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploringthecomplexity.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faculty.gsm.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastlane.appsembler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fecc.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'first.wordsesh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flash.wxxi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flta.cli.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fukushima.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fw.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gem.business.ucdenver.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.pima.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcertificates.cookbookcooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gil.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveto.shawnee.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpf.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsefilms.gse.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtpe.pe.gatech.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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