m.ajc.org

Issued by R3

About this certificate

This digital certificate with serial number 03:43:f5:f2:56:0c:f2:ad:e5:ea:9e:47:61:64:1f:0b:a5:ea was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=m.ajc.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:f5:f2:56:0c:f2:ad:e5:ea:9e:47:61:64:1f:0b:a5:ea
Serial Number (int): 284462695519103756275573589545532345001450
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c6:17:8d:ad:9d:42:7c:e7:ce:8a:e5:6f:c1:5a:cc:c1:ea:9e:60:3e
Fingerprint (sha256): 07:eb:7e:bd:22:72:98:b1:ca:f6:7a:73:9c:22:59:3a:e9:42:2c:2d:7c:69:85:8e:45:10:3b:6c:40:a2:55:0b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate m.ajc.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for m.ajc.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

m.ajc.org
makinghistory.gwu.edu
management.arizona.edu
marketing.magicsoftware.com
marketingprojects.maryville.edu
mediaroom.livestrong.org
meetingsqa.aaas.org
mobile-data.skyandtelescope.com
msa2016.berkeley.edu
nanophotonics.asu.edu
nartc.fcm.arizona.edu
news.ged.com
next.warnerpacific.edu
odl.rutgers.edu
oist.ucsb.edu
oldsite.itu.edu
online.asu.edu
online.ece.udel.edu
online.foodsafety.msu.edu
ordbc.arizona.edu
partners.starleaf.com
parttime.carey.jhu.edu
pcp.sonoranucedd.fcm.arizona.edu
pharmacy.ss.pacific.edu
pophealth.uahs.arizona.edu
powertest.ctd.northwestern.edu
programs.carey.jhu.edu
projectshare.sfsu.edu
psp.sandiegozoo.org
psych.lifesci.ucsb.edu
qa.canceratlas.cancer.org
querybuilder.appcelerator.com
radsafe.berkeley.edu
rc.library.osu.edu
religion.berkeley.edu
research-pp.stonybrook.edu
resx.usc.edu
reweb.archbalt.org
rgd2020.rutgers.edu
rheumatology.utoronto.ca
rmp.rutgers.edu
rpgp.berkeley.edu
rstinstruments.rstinstruments.com
rstinstrumentsinfo.rstinstruments.com
scilsresx.rutgers.edu
sdgs-staging.scout.org
sexgenderlab.human.cornell.edu
smagent.ctd.northwestern.edu
sourceu.warnerpacific.edu
stage.onlineeducation.psu.edu
stanfordsummersession.stanford.edu
states.drugpolicy.org
stfincrease.unlv.edu
support.doctorswithoutborders.org
swfwmd.state.fl.us
t.wholegrainscouncil.org
tango.franklin.uga.edu
test-web-lws.edu.help
test.2.www.upenn.edu
test.aep.cornell.edu
test.cam.cornell.edu
test.cee.cornell.edu
test.cochise.az.gov
test.ethics3.pantheon.berkeley.edu
test.finance.upenn.edu
test.mae.cornell.edu
test.makinghistory.gwu.edu
test.mse.cornell.edu
test.ocio.osu.edu
test.radcliffe.edu
test.slp.gse.upenn.edu
test.utrp.gse.upenn.edu
testb.test.uis.georgetown.edu
tl.wvu.edu
townofdiscoverybay.ca.gov
townsendlab.berkeley.edu
transitions.metrotech.edu
trustees365.thetrustees.org
tst.dhsri.yale.edu
tst.ergo.yale.edu
tst.gisf.yale.edu
tst.odonnelllab.research.yale.edu
updates.cjei.cornell.edu
updates.cpra.cornell.edu
upenn-it.asc.upenn.edu
virtual2.unlv.edu
vmusa.corpny.restorationplaza.org
vpr.arizona.edu
wanprc.washington.edu
web.commerce.virginia.edu
web.stjohns.edu.help
webdev.colorado.edu
website.wells.edu
webtest.tsu.edu
winter.arizona.edu
wireless.unlv.edu
wissc.arizona.edu
wp.americancouncils.org
wp.mwcc.edu
ww.thetrustees.org

Other certificates including the domain name ajc.org

(limited to 100 certificates)
it.uahs.arizona.edu
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
hub.meed.com
yakamafish-star.net
5673385510043648-fe4.pantheonsite.io
live.ucdavis.edu
5673385510043648-fe4.pantheonsite.io
actnow.ajc.org
liberalarts.ss.pacific.edu
dev.embody.yale.edu
expeditions.sandiegozoo.org
5673385510043648-fe4.pantheonsite.io
test.ajc.org
host2.openminds.com
m.ajc.org
5673385510043648-fe4.pantheonsite.io
live.bme.cornell.edu
labellelab.asu.edu
5673385510043648-fe4.pantheonsite.io
legacy.hq.philabundance.org
inside.gc.cuny.edu
spamtitan.ajc.org
global.ajc.org
ajc.org
live.ophd.pantheon.berkeley.edu
www.gospringboard.com
global.ajc.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
global.ajc.org
global.ajc.org
global.ajc.org
yakamafish-star.net
5673385510043648-fe4.pantheonsite.io
liberalarts.ss.pacific.edu
live.ucdavis.edu
lp.programs.carey.jhu.edu.help
ajc.org
intranet.olivecrest.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
lp.grad.online.udel.edu.help
laborlabsandbox.aflcio.org
dev.dhsri.yale.edu
industri40.ida.dk
info-dev.calperformances.org
5673385510043648-fe4.pantheonsite.io
internal.gcir.org
lawebmail.ajc.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
international.research.ucsb.edu
ajc.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
csc.arizona.edu
yakamafish-star.net
csc.arizona.edu
international.research.ucsb.edu
dev.dhsri.yale.edu
ajc.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
live.ophd.pantheon.berkeley.edu
m.ajc.org
live.ucdavis.edu
5673385510043648-fe4.pantheonsite.io
libre.estadio.com
dev-lp-jhubsph.edu.help
yakamafish-star.net
ipv6.earthjustice.org
design-engineering.princeton.edu
dev-web-degacc.edu.help
global.ajc.org
dev-web-degacc.edu.help
sslvpnny.ajc.org
gws-uat.earthjustice.org
5673385510043648-fe4.pantheonsite.io
it-chat.web.arizona.edu
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
host2.cenmi.org
5673385510043648-fe4.pantheonsite.io
dcwebmail.ajc.org
5673385510043648-fe4.pantheonsite.io
spamtitan.ajc.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
dev.cmsi.gse.upenn.edu
5673385510043648-fe4.pantheonsite.io
info.vcfa.edu
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
global.ajc.org
lambda.usc.edu
5673385510043648-fe4.pantheonsite.io
info-dev.calperformances.org

Certificate

The complete raw certificate details for m.ajc.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284462695519103756275573589545532345001450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-12 20:28:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-10 20:28:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'm.ajc.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2384 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ajc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'management.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.magicsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingprojects.maryville.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaroom.livestrong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetingsqa.aaas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-data.skyandtelescope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msa2016.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanophotonics.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.ged.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.warnerpacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odl.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oist.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldsite.itu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.ece.udel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.foodsafety.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordbc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.starleaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parttime.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcp.sonoranucedd.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacy.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pophealth.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powertest.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programs.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectshare.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psp.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psych.lifesci.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.canceratlas.cancer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'querybuilder.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsafe.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.library.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religion.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research-pp.stonybrook.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reweb.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgd2020.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmp.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpgp.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstruments.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstrumentsinfo.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scilsresx.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdgs-staging.scout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexgenderlab.human.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smagent.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourceu.warnerpacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanfordsummersession.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'states.drugpolicy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfincrease.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swfwmd.state.fl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.wholegrainscouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tango.franklin.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-web-lws.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.2.www.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cee.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cochise.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ethics3.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.finance.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ocio.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.radcliffe.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.slp.gse.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.utrp.gse.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testb.test.uis.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tl.wvu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townofdiscoverybay.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townsendlab.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transitions.metrotech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustees365.thetrustees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.dhsri.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.ergo.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.gisf.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.odonnelllab.research.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.cjei.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.cpra.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upenn-it.asc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtual2.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmusa.corpny.restorationplaza.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpr.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanprc.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.commerce.virginia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.stjohns.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdev.colorado.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'website.wells.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtest.tsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winter.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wireless.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wissc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.mwcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.thetrustees.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000183ce1901e600000403004730450221008e58a16f7e923bf32893e6acf0e1fad899e97f81b4e88e3ab65ad7666c3633ad022048b16e9cc10adbd2950182538c20de6df5aae7cbd86a73e424c1a682d569c17a007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000183ce1901ce000004030046304402201316e9b111916a37844940e6ba71af6d933e71fbd88ba1b308eb49e4c66812c3022025f1425b8e05250231849211df2cf87e67fcda4aafd7a08882cfe0cc360627dd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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