a.ns.christiancentury.org

Issued by R3

About this certificate

This digital certificate with serial number 04:01:bd:78:75:05:f5:48:cf:50:f6:ef:70:1c:bb:61:8c:0f was issued on by Let's Encrypt.

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=a.ns.christiancentury.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:01:bd:78:75:05:f5:48:cf:50:f6:ef:70:1c:bb:61:8c:0f
Serial Number (int): 349041275634302274618158613940283971308559
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2d:41:c6:6a:c2:33:9b:c8:9b:7d:2c:f8:97:df:67:1c:90:2b:7b:f0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a9:da:7c:28:37:6f:b6:27:6c:99:eb:52:4d:e4:64:24:9c:b9:5c:6b
Fingerprint (sha256): 06:b0:95:97:9b:97:7a:7e:b3:1e:68:e9:43:d6:5e:66:bc:52:4d:85:df:b5:fb:67:50:2f:0b:5a:4a:76:b9:b5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate a.ns.christiancentury.org

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for a.ns.christiancentury.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a.ns.christiancentury.org
ac-dc-cas.americancouncils.org
admissions-test.web.arizona.edu
adn-test.nysenate.gov
api-peer.stg.gbci.org
apple.docs.rutgers.edu
bafasmtp.actorsfund.org
blog.nextlevelapparel.com
brazil-pr-250.pantheon-multidev.ufc.com
californiamemorialstadium.com
communitytestsite2.uaf.edu
de.ecoligo-dev.briteweb.com
dev.engie.appcelerator.com
dreamschoolnyc.org
e2aproject.org
egg.nacha.org
energy-business-review.com
error.on.ethics3.pantheon.berkeley.edu
ftp.commonsensemedia.org
huntingscience.multidevcom.uaf.edu
inews.appcelerator.com
iteachuone.multidevcom.uaf.edu
korea-pr-267.pantheon-multidev.ufc.com
korea-pr-298.pantheon-multidev.ufc.com
kubernetes.earthjustice.org
latin-america-pr-250.pantheon-multidev.ufc.com
latin-america-pr-267.pantheon-multidev.ufc.com
live.staging.reviews.com
marcellino.nysenate.gov
multidev.princeton.edu
mygivingstory.givingtuesday.org
nanograv-pire.wvu.edu
neil.myers.connorsstate.edu
nmrslot-gacor.vivote.gov
nrotc.web.arizona.edu
nsc.rebelcopy.unlv.edu
phd.antioch.edu
pr-123-brazil.pantheon-multidev.ufc.com
pr-140.pantheon-multidev.ufc.com
pr-250.pantheon-multidev.ufc.com
pr-267.pantheon-multidev.ufc.com
pr-298.pantheon-multidev.ufc.com
presidential-search.sfsu.edu
ramses.ecotrust.org
requestinfo.connorsstate.edu
russia-pr-267.pantheon-multidev.ufc.com
russia-pr-298.pantheon-multidev.ufc.com
soe-msinterviews.ucdavis.edu
staging.reviews.com
test.thedoorway.nh.gov
theoldsite.felician.edu
uafusion.arizona.edu
us-espanol-pr-140.pantheon-multidev.ufc.com
us-espanol-pr-298.pantheon-multidev.ufc.com
vaccinebooster3.mcny.org
validacao.lbv.org
www.alcantara.nysenate.gov
www.continuinged.psu.edu
www.efc.sog.unc.edu
www.resnet.rutgers.edu

Other certificates including the domain name christiancentury.org

(limited to 100 certificates)
3fadmin.govdelivery.com
streetfilms.org
www.christiancentury.org
yakamafish-star.net
161511-web1.vilcek.org
streetfilms.org
cc-cdn.colab.coop
a.ns.christiancentury.org
a.ns.christiancentury.org
2fadmin.govdelivery.com
abong.ufcespanol.com
2fadmin.govdelivery.com
160.166.tmcapital.com
cc-cdn.colab.coop
161511-web1.vilcek.org
christiancentury.org
christiancentury.org
afscme57.org
2fsupport.govdelivery.com
2fsupport.govdelivery.com
161511-web1.vilcek.org
ads.christiancentury.org
yakamafish-star.net
alldata.com
streetfilms.org
streetfilms.org
christiancentury.org
streetfilms.org
christiancentury.org
abong.ufcespanol.com
alldata.com
2020.sundialsolarenergy.com
2fsupport.govdelivery.com
christiancentury.org
161511-web1.vilcek.org
yakamafish-star.net
ads.christiancentury.org
5-bdrtglrsmitrpcya.centricconsulting.com
alldata.com
alldata.com
cc-cdn.colab.coop
christiancentury.org
161511-web1.vilcek.org
cc-cdn.colab.coop
cc-cdn.colab.coop
161511-web1.vilcek.org
cc-cdn.colab.coop
2fsupport.govdelivery.com
2fsupport.govdelivery.com
161511-web1.vilcek.org
banking-business-review.com
2fadmin.govdelivery.com
161511-web1.vilcek.org
agd.nebrwesleyan.edu
cc-cdn.colab.coop
cc-cdn.colab.coop
cc-cdn.colab.coop
berkscountyweddings.com
afrinul.crl.edu
alternatif.dev.oceana.org
ads.christiancentury.org
161511-web1.vilcek.org
2fsupport.govdelivery.com
christiancentury.org
alldata.com
161511-web1.vilcek.org
2fadmin.govdelivery.com
2fsupport.govdelivery.com
160.166.tmcapital.com
alldata.com
161511-web1.vilcek.org
161511-web1.vilcek.org
banking-business-review.com
2fsupport.govdelivery.com
cc-cdn.colab.coop
cc-cdn.colab.coop
abong.ufcespanol.com
banking-business-review.com
afscme57.org
afscme57.org
2fsupport.govdelivery.com
161511-web1.vilcek.org
161511-web1.vilcek.org
californiamemorialstadium.com
161511-web1.vilcek.org
yakamafish-star.net
banking-business-review.com
161511-web1.vilcek.org
streetfilms.org
2fsupport.govdelivery.com
streetfilms.org
160.166.tmcapital.com
161511-web1.vilcek.org
alldata.com
2fsupport.govdelivery.com
161511-web1.vilcek.org
agd.nebrwesleyan.edu
alldata.com
2fadmin.govdelivery.com
161511-web1.vilcek.org

Certificate

The complete raw certificate details for a.ns.christiancentury.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JN61R0OEToyc9CIab1N
fFPve9HGDGrKGYI2xIZDj1g0/YpVvHizoPQmjkhcgffw0DLtIcdqKmZwWURQkKdA
P22GGARM8LLaHTGj2/AzuU5CZGNEMPcva3YNWgQk9hY+0unXuv/T4vdgT/3FbwuH
7XVLuu4g+czlbMzruU+Yy54s1vyp1W4/NraAq8T9qVUYBLtp1Uvzw2vJ4MQIXdae
NRvgRqXWpRHggyeaD/2DrO1wXAB4YY+sTuLY/Exugh8G057soGHwiQNa6myP6enc
wLAmWU0lp3ebW91iAj5jD5qhwJCSp6xNbr10ujDrq/YKK0BUm9dFH31bmQB68DQk
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349041275634302274618158613940283971308559
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-29 21:15:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-28 21:15:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a.ns.christiancentury.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30874871418674330599856582475032938667375268619443001630863980336265595132255055319191643458111097912849518683644418268103987213994455977559607858848119842980533392049063729003920357542074988987461137585846020662431659934377838370289619002655875385799518291331039036698807426681817568646147255938646103126008097680224992782780625624378043298116774876838353123724342507002380006971784078794529182989372683470709944523843444459913842097363110245276310289984800758291731507727636966622104526315616493280025870076217545288249244971934789372294783507838417764757756356243493322858302549568740438214483485562672125977044153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d41c66ac2339bc89b7d2cf897df671c902b7bf0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1763 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.ns.christiancentury.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ac-dc-cas.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admissions-test.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adn-test.nysenate.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-peer.stg.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apple.docs.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bafasmtp.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.nextlevelapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazil-pr-250.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiamemorialstadium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communitytestsite2.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.ecoligo-dev.briteweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.engie.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamschoolnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e2aproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egg.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energy-business-review.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'error.on.ethics3.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.commonsensemedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntingscience.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inews.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iteachuone.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'korea-pr-267.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'korea-pr-298.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubernetes.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latin-america-pr-250.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latin-america-pr-267.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.staging.reviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcellino.nysenate.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multidev.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygivingstory.givingtuesday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanograv-pire.wvu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neil.myers.connorsstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmrslot-gacor.vivote.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrotc.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsc.rebelcopy.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phd.antioch.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr-123-brazil.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr-140.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr-250.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr-267.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr-298.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presidential-search.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramses.ecotrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'requestinfo.connorsstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russia-pr-267.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russia-pr-298.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soe-msinterviews.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.reviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.thedoorway.nh.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoldsite.felician.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uafusion.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-espanol-pr-140.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-espanol-pr-298.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccinebooster3.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'validacao.lbv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alcantara.nysenate.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.continuinged.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.efc.sog.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resnet.rutgers.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187cf15c83b0000040300473045022100b87dd12d8756b6596a6d39ac026da45866e632721838a24cd8778955a2d25b0a022068447e428621e7af4a1a36e166697332ff7732dae9a7228a20b36e4277bde007007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187cf15c83400000403004730450220433e7105bd9c9ebab3b02a681123a976e32fd3d901c32e5f7dbcb4c177fade3c022100e1798dd6b60f44851bcbac471b014da089576b6d376cecc0bb091f7100ee782a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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