achieve.engineering.asu.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:4c:f1:58:00:26:11:cc:77:03:9a:ed:d0:0d:35:8e:36:b0 was issued on by Let's Encrypt.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=achieve.engineering.asu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4c:f1:58:00:26:11:cc:77:03:9a:ed:d0:0d:35:8e:36:b0
Serial Number (int): 374631404485156204203517520940739580540592
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 46:4f:a2:39:16:7e:50:98:0b:89:57:91:5f:09:df:19:13:ab:c7:52
Fingerprint (sha256): 07:93:57:30:47:f6:0d:7e:56:a7:42:75:96:2b:df:ad:21:4f:7a:86:59:2f:a1:b6:7c:32:fd:37:d1:82:f4:a4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate achieve.engineering.asu.edu

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for achieve.engineering.asu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

achieve.engineering.asu.edu
admissions.kettering.edu
anniversaries.uahs.arizona.edu
appcamp.engineering.asu.edu
arch.utexas.edu
archive-mba.wharton.upenn.edu
asktico.lib.berkeley.edu
brand.purdue.edu
broadway.playhousesquare.org
campaign.ucsc.edu
chancellorsearch.ucsc.edu
cimes.csbs.csusb.edu
costume.library.cornell.edu
ctc.sfsu.edu
dev1.si.umich.edu
developerdev.moodysanalytics.com
dmats.spcs.stanford.edu
dmats.stanford.edu
eis.washington.edu
elearning.med.utoronto.ca
events-archive.ucsc.edu
exploringthecomplexity.ucdavis.edu
furiposters.engineering.asu.edu
geniustransitchallenge.ny.gov
heckerlab.arizona.edu
hello.engineering.asu.edu
info.extension.ucsb.edu
investors.mgmgrowthproperties.com
itcatalyst.sfsu.edu
jsat.ucdavis.edu
lambda.usc.edu
leap.ucdavis.edu
live-sas-strategic-plan.pantheon.sas.upenn.edu
live.ucdavis.edu
makinghistory.gwu.edu
missioncritical.wharton.upenn.edu
mtageniustransitchallenge.ny.gov
odee-pgmo.osu.edu
ordbc.arizona.edu
osr-ops-test01.colorado.edu
partnership.gse.upenn.edu
pctc.washington.edu
pmbasa.arizona.edu
polzlab.mit.edu
production.id.ucsb.edu
radsafe.berkeley.edu
regenerativemedicine.uahs.arizona.edu
rmp.rutgers.edu
scilsresx.rutgers.edu
smtp.asc.upenn.edu
stanfordsummersession.stanford.edu
stg-blog.www.msit.io
techdigest.sagepub.com
test.cam.cornell.edu
test.mae.cornell.edu
test.mse.cornell.edu
tl.wvu.edu
transportplan.rutgers.edu
vpr.arizona.edu
www.docs.bigid.com
www.ee.udel.edu
www.elearning.med.utoronto.ca
www.gs.utexas.edu
www.rb.az.gov
www.reich.chem.ucsb.edu
www.scl.ece.ucsb.edu
www.tbsi.berkeley.edu
www.universityextension.ucdavis.edu
www.wanprc.washington.edu
www2.ccny.cuny.edu
yelab.ucsf.edu

Other certificates including the domain name asu.edu

(limited to 100 certificates)
discoverylabs.asu.edu
5734743547052032-fe3.pantheonsite.io
5631131353350144-fe1.pantheonsite.io
5681777339269120-fe1.pantheonsite.io
5757715179634688-fe2.pantheonsite.io
5638059940904960-fe3.pantheonsite.io
cbs.asu.edu
tutortrac.asu.edu
test-web-lws.edu.help
speechandhearingasu.com
asupharos1.asu.edu
5186145897938944-fe4.pantheonsite.io
5769623379116032-fe2.pantheonsite.io
carpepm.almonds.com
tools.clas.asu.edu
5176288276905984-fe4.pantheonsite.io
sni.cloudflaressl.com
5658044692168704-fe3.pantheonsite.io
5648867420798976-fe4.pantheonsite.io
5757715179634688-fe2.pantheonsite.io
5633267831144448-fe1.pantheonsite.io
hyl-app-dev02.asurite.ad.asu.edu
5702666986455040-fe2.pantheonsite.io
5631986051842048-fe1.pantheonsite.io
5638059940904960-fe3.pantheonsite.io
5712536552865792-fe3.pantheonsite.io
5642906408845312-fe3.pantheonsite.io
moodle.asu.edu
it.uahs.arizona.edu
5691878833913856-fe3.pantheonsite.io
osha.asu.edu
5186145897938944-fe4.pantheonsite.io
cen.engineering.asu.edu
5769720821186560-fe3.pantheonsite.io
5689792285114368-fe2.pantheonsite.io
5712536552865792-fe3.pantheonsite.io
staffcouncil.asu.edu
5702351037923328-fe2.pantheonsite.io
5663284820705280-fe3.pantheonsite.io
5702666986455040-fe2.pantheonsite.io
sni.cloudflaressl.com
5638059940904960-fe3.pantheonsite.io
sni.cloudflaressl.com
morrisoninstitute.asu.edu
5663284820705280-fe3.pantheonsite.io
5691420614590464-fe3.pantheonsite.io
5709068098338816-fe3.pantheonsite.io
nartc.fcm.arizona.edu
5752142325350400-fe1.pantheonsite.io
5730602795925504-fe1.pantheonsite.io
5730774057746432-fe4.pantheonsite.io
transportation.asu.edu
5763210187636736-fe2.pantheonsite.io
5633267831144448-fe1.pantheonsite.io
sfunder8cert.net
5707324073181184-fe2.pantheonsite.io
*.asu.edu
dlists.asu.edu
webhost80.asu.edu
5693341270278144-fe4.pantheonsite.io
5658962204557312-fe4.pantheonsite.io
5691878833913856-fe3.pantheonsite.io
5736907271045120-fe1.pantheonsite.io
worksite.asu.edu
dooraccess.biodesign.asu.edu
5691878833913856-fe3.pantheonsite.io
sni.cloudflaressl.com
5679846214598656-fe1.pantheonsite.io
5763210187636736-fe2.pantheonsite.io
5766466041282560-fe4.pantheonsite.io
5659822271758336-fe3.pantheonsite.io
dept-sql-n2.asurite.ad.asu.edu
5681904711892992-fe1.pantheonsite.io
jewishstudies.asu.edu
5769623379116032-fe2.pantheonsite.io
5689792285114368-fe2.pantheonsite.io
5736907271045120-fe1.pantheonsite.io
uconnectlabs.com
drupal.asu.edu
5709068098338816-fe3.pantheonsite.io
5731346630574080-fe3.pantheonsite.io
aria.asu.edu
5728757302165504-fe2.pantheonsite.io
5696381570252800-fe2.pantheonsite.io
5721489412194304-fe1.pantheonsite.io
5663284820705280-fe3.pantheonsite.io
banking-business-review.com
sni.cloudflaressl.com
cdn-test.battlefields.org
5734743547052032-fe3.pantheonsite.io
5683582030839808-fe1.pantheonsite.io
cholla.rc.asu.edu
sni.cloudflaressl.com
cad.asu.edu
5727517264576512-fe4.pantheonsite.io
thunderbird.asu.edu
5633267831144448-fe1.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
osha.asu.edu
fultonapps1.asu.edu

Certificate

The complete raw certificate details for achieve.engineering.asu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374631404485156204203517520940739580540592
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-13 20:40:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-11 20:40:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'achieve.engineering.asu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1737 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achieve.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admissions.kettering.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anniversaries.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appcamp.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arch.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive-mba.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asktico.lib.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadway.playhousesquare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chancellorsearch.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimes.csbs.csusb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costume.library.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctc.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.si.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developerdev.moodysanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.spcs.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eis.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearning.med.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events-archive.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploringthecomplexity.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furiposters.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniustransitchallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heckerlab.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.extension.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.mgmgrowthproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcatalyst.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsat.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambda.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leap.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-sas-strategic-plan.pantheon.sas.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missioncritical.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtageniustransitchallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odee-pgmo.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordbc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osr-ops-test01.colorado.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnership.gse.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pctc.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmbasa.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polzlab.mit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.id.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsafe.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regenerativemedicine.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmp.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scilsresx.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.asc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanfordsummersession.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-blog.www.msit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techdigest.sagepub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tl.wvu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transportplan.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpr.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docs.bigid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ee.udel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elearning.med.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gs.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rb.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reich.chem.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scl.ece.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tbsi.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universityextension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wanprc.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yelab.ucsf.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001815f026a46000004030046304402201502d3db83132d8066bb760f294fddac66ac9165488264017c9f550fe94c52c102202f924987c210ec5ba76f2635f99de9c3cfecf283087e0de5c19bb857d44f60290076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001815f026a350000040300473045022053f7f227d3b463b983233b17f8c56ca6e63980ed1bb2436678feebb1589363150221008d8bcd32461da3824876cb97338b5ec9927652a177e39e42a2f8d9321a86c07b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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