upenn-it.asc.upenn.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:13:d5:ef:cc:74:7d:4f:47:b4:84:fd:02:88:19:d1:a4:54 was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=upenn-it.asc.upenn.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:13:d5:ef:cc:74:7d:4f:47:b4:84:fd:02:88:19:d1:a4:54
Serial Number (int): 268086593435670755116988410112027955143764
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b4:bd:06:f6:be:f1:65:cd:e8:8d:46:19:03:cc:1a:ef:ec:62:62:36
Fingerprint (sha256): 03:45:aa:c2:57:9a:e4:d1:cc:11:33:72:9b:fa:3a:24:50:b3:0f:dc:64:3d:01:54:c0:1a:da:2b:14:62:57:10

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate upenn-it.asc.upenn.edu

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for upenn-it.asc.upenn.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

upenn-it.asc.upenn.edu
virtual2.unlv.edu
vmusa.corpny.restorationplaza.org
vpr.arizona.edu
wanprc.washington.edu
web.commerce.virginia.edu
web.stjohns.edu.help
webdev.colorado.edu
website.wells.edu
webtest.tsu.edu
winter.arizona.edu
wireless.unlv.edu
wissc.arizona.edu
wp.americancouncils.org
wp.mwcc.edu
ww.thetrustees.org
www-chem.umd.edu
www.adobe.arizona.edu
www.advising.arizona.edu
www.archydro.crwr.utexas.edu
www.asla.ced.berkeley.edu
www.azcc.arizona.edu
www.azspo.az.gov
www.beta-engineering.princeton.edu
www.blackbearcoffee.com
www.blogs.earthjustice.org
www.cbs.asu.edu
www.cie.ucdavis.edu
www.crwr.utexas.edu
www.cybersecurity.umass.edu
www.datahero.com
www.design-engineering.princeton.edu
www.diplomacy.state.gov
www.dsdm.org
www.earlymodernenglishdrama.folger.edu
www.eci.ucsb.edu
www.ee.udel.edu
www.ein.az.gov
www.esc.rutgers.edu
www.eventsinfo.presidio.edu
www.extension.ucdavis.edu
www.facultyprograms.arizona.edu
www.financialaid.arizona.edu
www.gim.utoronto.ca
www.giving.dartmouth.edu
www.grrc.az.gov
www.gs.utexas.edu
www.hcii.cs.cmu.edu
www.ihe.uga.edu
www.inas2.uga.edu
www.international.arizona.edu
www.internationaladmissions.arizona.edu
www.issr.asu.edu
www.jhpiego.jhu.edu
www.lgcr.com
www.lhs.berkeley.edu
www.libertytreefoundation.org
www.marketing.arizona.edu
www.materialgirlcollection.com
www.molecularbiosci.utexas.edu
www.museconnect.arizona.edu
www.nartc.fcm.arizona.edu
www.newpiper.com
www.odee-pgmo.osu.edu
www.ol.rutgers.edu
www.online.foodsafety.msu.edu
www.onlinecso.dshs.wa.gov
www.onlineeducation.psu.edu
www.ordbc.arizona.edu
www.projectrequest.axway.com
www.projectshare.sfsu.edu
www.randybryceforcongress.com
www.readiness.osu.edu
www.resx.usc.edu
www.sisterstory.org
www.spain.uga.edu
www.sph.berkeley.edu
www.ss.pacific.edu
www.stopbreathethink.com
www.strength.org
www.studentmedia.arizona.edu
www.studyabroad.arizona.edu
www.summer-winter.arizona.edu
www.swcsc.arizona.edu
www.universityextension.ucdavis.edu
www.vpr.arizona.edu
www1.ccny.cuny.edu
www2.ccny.cuny.edu
www2.doctorswithoutborders.org
www2.familycenter.upenn.edu
www2.finance.upenn.edu
www2.naco.org
www2.president.usc.edu
www2.provost.upenn.edu
www2.stkate.edu
x17my.ctd.northwestern.edu
yqss.kjzz.org

Other certificates including the domain name upenn.edu

(limited to 100 certificates)
5647435049205760-fe4.pantheonsite.io
www.nursing.upenn.edu
cbio.med.upenn.edu
test-web-lws.edu.help
htsc.med.upenn.edu
statuspage.io
carpepm.almonds.com
5646620347596800-fe3.pantheonsite.io
us.prod.campusgroups.com
5648867420798976-fe4.pantheonsite.io
experience.wharton.upenn.edu
5739407210446848-fe1.pantheonsite.io
gezfpcardio.uphs.upenn.edu
test.climateweek.provost.upenn.edu
5153437574496256-fe4.pantheonsite.io
color.psych.upenn.edu
5648334039547904-fe1.pantheonsite.io
covidresults.upenn.edu
prod.2.slot.cdn.salesforce-communities.com
5739407210446848-fe1.pantheonsite.io
admissions.emeritus.org
5753264117121024-fe2.pantheonsite.io
cluster.technolutions.net
5666985740337152-fe1.pantheonsite.io
answers.design.upenn.edu
5663284820705280-fe3.pantheonsite.io
basesite.isc.upenn.edu
ucdc.edu
cluster3.technolutions.net
*.one.upenn.edu
5663284820705280-fe3.pantheonsite.io
us.prod.campusgroups.com
sites.nursing.upenn.edu
media.vet.upenn.edu
nartc.fcm.arizona.edu
adrf.upenn.edu
5704093720903680-fe2.pantheonsite.io
5742796208078848-fe2.pantheonsite.io
5732694713434112-fe3.pantheonsite.io
5680876067225600-fe2.pantheonsite.io
calendar.sdzsafaripark.org
bhlab.wharton.upenn.edu
cinemastudies.sas.upenn.edu
5707324073181184-fe2.pantheonsite.io
j3.shared.global.fastly.net
wemba-sanfran.wharton.upenn.edu
5652786310021120-fe4.pantheonsite.io
www.ic.groupish.com
*.dental.upenn.edu
*.house.upenn.edu
faryabi16.pmacs.upenn.edu
my.wharton.upenn.edu
slimscale.seas.upenn.edu
5711129414205440-fe2.pantheonsite.io
5740745361195008-fe4.pantheonsite.io
statuspage.io
wepapps06.wharton.upenn.edu
arcbase2.admin.upenn.edu
uconnectlabs.com
statuspage.io
5728757302165504-fe2.pantheonsite.io
5663284820705280-fe3.pantheonsite.io
5751399832879104-fe1.pantheonsite.io
banking-business-review.com
5739407210446848-fe1.pantheonsite.io
5741031244955648-fe4.pantheonsite.io
5747976207073280-fe2.pantheonsite.io
cdn-test.battlefields.org
chef.itmat.upenn.edu
apex.sas.upenn.edu
test.eis.uw.edu
5753113524830208-fe1.pantheonsite.io
5634612826996736-fe4.pantheonsite.io
statuspage.io
mshp.med.upenn.edu
powerofpenn.upenn.edu
hlp-web.pmacs.upenn.edu
5659974608879616-fe3.pantheonsite.io
statuspage.io
auctions.wharton.upenn.edu
citeak.multidevcom.uaf.edu
5728757302165504-fe2.pantheonsite.io
www.design-engineering.princeton.edu
5720605454237696-fe1.pantheonsite.io
achieve.escoffier.edu
5739407210446848-fe1.pantheonsite.io
*.afcri.upenn.edu
matrox-config.wharton.upenn.edu
*.upenn.edu
cluster3.technolutions.net
5663284820705280-fe3.pantheonsite.io
5739407210446848-fe1.pantheonsite.io
logic.sas.upenn.edu
nxterra.ucop.edu
wwwapprl07.isc.upenn.edu
5764878782431232-fe4.pantheonsite.io
prod.2.slot.cdn.salesforce-communities.com
banking-business-review.com
cpcrs.upenn.edu
rt19.pmacs.upenn.edu

Certificate

The complete raw certificate details for upenn-it.asc.upenn.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268086593435670755116988410112027955143764
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-14 08:55:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-12 08:55:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'upenn-it.asc.upenn.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2321 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upenn-it.asc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtual2.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmusa.corpny.restorationplaza.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpr.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanprc.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.commerce.virginia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.stjohns.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdev.colorado.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'website.wells.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtest.tsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winter.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wireless.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wissc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.mwcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.thetrustees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-chem.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adobe.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advising.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archydro.crwr.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asla.ced.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azcc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azspo.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beta-engineering.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackbearcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blogs.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbs.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cie.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crwr.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cybersecurity.umass.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datahero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.design-engineering.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diplomacy.state.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsdm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earlymodernenglishdrama.folger.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eci.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ee.udel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ein.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esc.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eventsinfo.presidio.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facultyprograms.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financialaid.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gim.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giving.dartmouth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grrc.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gs.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcii.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihe.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inas2.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.international.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internationaladmissions.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.issr.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhpiego.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lgcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lhs.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertytreefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketing.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.materialgirlcollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.molecularbiosci.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.museconnect.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newpiper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odee-pgmo.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ol.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.online.foodsafety.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinecso.dshs.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ordbc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectrequest.axway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectshare.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.randybryceforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readiness.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sisterstory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spain.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sph.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stopbreathethink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strength.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studentmedia.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studyabroad.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summer-winter.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swcsc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universityextension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vpr.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.familycenter.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.finance.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.naco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.president.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.provost.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.stkate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x17my.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yqss.kjzz.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000183d5ebf57e0000040300483046022100c9fdb011ff613210bcf875ebd727f5d574f8c4440e75aba210672644f2e11e60022100d5a22394f85f437044d122095d207970c81769da4a87c738942790edff1c2f9b007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000183d5ebf5910000040300473045022011053d1bab1241fcbfe859194050014fd69f2b6a9986cde9d361a1f81968478d022100d0af6b989bac08d9c828a5e68a4011f0eab226f4f2e9839b5215fe76a2a68a23
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005c691552c6fd43978ca546a2498da25e7a4dea9ddea57094a02ac6f1701d34d6c138a37528ff2bd5b2b0179b469ba5745da8bb9cddb6ddf5d7cf1fdea2303bf062dec4cb9879534ed0b8b8bbc7abb50cb742a5e2453fd5f57352712ea9d7e677b8c235efd9beea47dc230eb6e8ba0a775b3254f8a639536f9f394f43b0d22187b3dfb90ab36ca19bdce54198a3c05b3bf42a7fd9d4e9a15bfc8a899e8f358ef5f2b8f27fac767f3f0398c7de6516981f0970867b4876cf9ed902b8d53c40b46ba8ba51d911e54100fb8115bca24d4efd7c89deb6d904f897195176398d27842b0e85ada9b0526910cb39a42fe30fcbf1233f649b42b22fa538cb5977607da872