nml-jail.newmedialab.cuny.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cf:81:9e:84:b7:7f:d9:4d:eb:87:4d:c7:17:71:49:09:69 was issued on by Let's Encrypt.

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nml-jail.newmedialab.cuny.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cf:81:9e:84:b7:7f:d9:4d:eb:87:4d:c7:17:71:49:09:69
Serial Number (int): 331947601234091293250408131820041110358377
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: aa:0c:c9:54:c0:50:a7:00:c5:5b:c0:fc:37:52:12:9f:a1:f7:7c:3d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b6:16:02:51:52:e1:f1:4b:81:b8:c5:42:79:4b:be:52:04:c1:d6:3c
Fingerprint (sha256): 04:3b:fa:b7:5d:80:74:88:06:47:b1:7c:b0:92:5e:7b:63:03:50:36:52:cc:bc:aa:d2:08:61:69:f1:4c:c6:8c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nml-jail.newmedialab.cuny.edu

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nml-jail.newmedialab.cuny.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adminer.python.lw4.gc.cuny.edu
ak.newmedialab.cuny.edu
archivingourstories.newmedialab.cuny.edu
artisticexchange.newmedialab.cuny.edu
beth.newmedialab.cuny.edu
caribbean.newmedialab.cuny.edu
christopher.newmedialab.cuny.edu
communitycontrol.newmedialab.cuny.edu
copenhagen.newmedialab.cuny.edu
craftingchildhoods.newmedialab.cuny.edu
digitalwriting.newmedialab.cuny.edu
documentafterlives.newmedialab.cuny.edu
documentingcappadocia.newmedialab.cuny.edu
dstolarz.newmedialab.cuny.edu
dzino.newmedialab.cuny.edu
ebp.newmedialab.cuny.edu
elit.newmedialab.cuny.edu
elizabeth.newmedialab.cuny.edu
engenderingislands.newmedialab.cuny.edu
feministgenealogies.newmedialab.cuny.edu
fightthefizz.newmedialab.cuny.edu
gittell.newmedialab.cuny.edu
humanitiesheart.newmedialab.cuny.edu
impertinence.newmedialab.cuny.edu
intermedia.newmedialab.cuny.edu
jailofmountjoy.newmedialab.cuny.edu
landconflict.newmedialab.cuny.edu
lungblock.newmedialab.cuny.edu
manuscriptbuilder.newmedialab.cuny.edu
marcferrez.newmedialab.cuny.edu
nml-jail.newmedialab.cuny.edu
nycsso.newmedialab.cuny.edu
phpmyadmin.nml.lw4.gc.cuny.edu
psm.newmedialab.cuny.edu
resistances-existences.newmedialab.cuny.edu
scienceplaystimeline.newmedialab.cuny.edu
sfraser.newmedialab.cuny.edu
sissi.newmedialab.cuny.edu
srap.newmedialab.cuny.edu
strike.newmedialab.cuny.edu
theresabernstein.newmedialab.cuny.edu
tlk.newmedialab.cuny.edu
toxicusa.newmedialab.cuny.edu
traffic.newmedialab.cuny.edu
vdarchive.newmedialab.cuny.edu
victoriansportswomen.newmedialab.cuny.edu
vortex.newmedialab.cuny.edu

Other certificates including the domain name cuny.edu

(limited to 100 certificates)
www.math.csi.cuny.edu
5684453372329984-fe2.pantheonsite.io
us.prod.campusgroups.com
*.gc.cuny.edu
*.csi.cuny.edu
ucdc.edu
csicampusnet.csi.cuny.edu
us.prod.campusgroups.com
guides.newman.baruch.cuny.edu
*.mhc.cuny.edu
mail.journalism.cuny.edu
eportfolios.macaulay.cuny.edu
libpapercut-vs.librarygp.citytech.cuny.edu
test.eis.uw.edu
qwifi.qc.cuny.edu
www.design-engineering.princeton.edu
5684453372329984-fe2.pantheonsite.io
nxterra.ucop.edu
ssa.ccny.cuny.edu
csi2-pps2.csi.cuny.edu
cslive.csi.cuny.edu
*.citytech.cuny.edu
mail.qc.cuny.edu
*.kbcc.cuny.edu
*.bmcc.cuny.edu
www.hcii.cs.cmu.edu
208.lsnc.net
5684453372329984-fe2.pantheonsite.io
*.citytech.cuny.edu
cunyba.us.reclaim.cloud
www.blogs.earthjustice.org
us.prod.campusgroups.com
qccommunity.qc.cuny.edu
*.citytech.cuny.edu
libcal.library.hunter.cuny.edu
5684453372329984-fe2.pantheonsite.io
library.citytech.cuny.edu
webdev.colorado.edu
virtual2.unlv.edu
5769928858664960-fe3.pantheonsite.io
5756915711737856-fe1.pantheonsite.io
mysite.qc.cuny.edu
*.york.ezproxy.cuny.edu
*.york.cuny.edu
5635703144710144-fe4.pantheonsite.io
upenn-it.asc.upenn.edu
*.qcc.cuny.edu
www.math.csi.cuny.edu
onesearch.cuny.edu
Collegiatelink4.Campuslabs.com
*.cuny.edu
csomlcms.cuny.edu
athletics.baruch.cuny.edu
senate.qc.cuny.edu
hub.meed.com
208.lsnc.net
webmail.exchtest.cuny.edu
*.cuny.edu
vision.cs.qc.cuny.edu
newmedialab.cuny.edu
dev.wellness.yale.edu
nml-jail.newmedialab.cuny.edu
qc.cuny.edu
*.gc.cuny.edu
go.journalism.cuny.edu
cunyba.cuny.edu
lib01.bcc.cuny.edu
hr.hunter.cuny.edu
live.ucdavis.edu
info-dev.calperformances.org
websql.brooklyn.cuny.edu
ldapmaint.ccny.cuny.edu
*.gc.cuny.edu
towa.tlehman.cuny.edu
ww2.hunter.cuny.edu
us.prod.campusgroups.com
libcal.library.hunter.cuny.edu
libcal.library.hunter.cuny.edu
good.gsm.cornell.edu
archivesspace.library.csi.cuny.edu
gold.cs.qc.cuny.edu
newlaborforum.cuny.edu
www.lgcr.com
cetls.bmcc.cuny.edu
pwdregister.bcc.cuny.edu
www.nai.arizona.edu
upenn-it.asc.upenn.edu
library.hunter.cuny.edu
mymail.baruch.cuny.edu
nistmep.blogs.govdelivery.com
spstime.sps.cuny.edu
*.cuny.edu
dev.embody.yale.edu
scalefunder.net
scalefunder.net
club.kjzz.org
cunyba.us.reclaim.cloud
help.brooklyn.cuny.edu
us.prod.campusgroups.com
asianamericanyc.hunter.cuny.edu

Certificate

The complete raw certificate details for nml-jail.newmedialab.cuny.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4641V6xNlCNQa9ulS7Op
dmBBQ4VKigKMeR1EY2ipvd3xkD2iR7DAJ/YtjltihaiNa4PbVLY0Erco4P2g7cwj
b2V39UVjmFMgOtJGDEbhKjFGMh89ND1NdfldxqdH1lkCXAgU0sdA33s9VTnLeg8q
brctF+0MLLFrkKuVqd5pHQWxxI6x/c7OlRzE0bwihmVJ0y8sRqRrAgsN5cGRan6/
fW9ZakGy1DnG0DPL49HOsJNkedqBK50LrQM4p2+dekUqtvKuevRekeC7+U9z2Ob5
6THJ5MBE28GjRVhc5BNUGsToXx8bdcXFpu1zBxm3UdYLmLUidl+iVn0ZJzertFXY
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331947601234091293250408131820041110358377
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-07 17:01:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-07 17:01:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nml-jail.newmedialab.cuny.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28742000575802508068147028287885810186455219720658225316821903869895230621804570960095123583316376852154646423397762986310020362075319690797000799329398915786092663580496463743024911659906368025074210202551088451001440520782169951581239490025918211470316203180841753626813805773702839769017246831088172622092717113766087415055224274956114390227495207722065587098988058698543284373641102570740930419171197241982707728260788253342629188218178494011465204395191838346512524414801644964263107581420618187632613452686759343810703469731263457564723759550489438920377600777289710766361763060537115528155255115211817581140147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa0cc954c050a700c55bc0fc3752129fa1f77c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1595 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminer.python.lw4.gc.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ak.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archivingourstories.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artisticexchange.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beth.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caribbean.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christopher.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communitycontrol.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copenhagen.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftingchildhoods.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalwriting.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentafterlives.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentingcappadocia.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dstolarz.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dzino.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebp.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elit.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elizabeth.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engenderingislands.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feministgenealogies.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightthefizz.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gittell.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humanitiesheart.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impertinence.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intermedia.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jailofmountjoy.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landconflict.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lungblock.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manuscriptbuilder.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcferrez.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nml-jail.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nycsso.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phpmyadmin.nml.lw4.gc.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psm.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resistances-existences.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scienceplaystimeline.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfraser.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sissi.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srap.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strike.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theresabernstein.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tlk.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toxicusa.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traffic.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vdarchive.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriansportswomen.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vortex.newmedialab.cuny.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016789d4f63a0000040300483046022100e39ceec6235e495d82b6c18e032a1d4a6c44d617ad768cdf4d2cb84edd45c0ea022100f787aea3edde5d8cd74a98863e29b6671c15dcbe4eab940e4bf91c025212c27100750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016789d4f838000004030046304402204ef0f04f8575b2ff4ccc044906133847de14fcfbe8c69f5e24b0f4ee7af78cb5022012693885a84fdd9c69521875eda58a8502701f1da176730c061b97c004ccda33
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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