nrostatic.com

Issued by R3

About this certificate

This digital certificate with serial number 03:8a:a0:eb:42:6f:03:7f:b0:ab:6a:2c:46:52:3a:95:0f:c5 was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nrostatic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:8a:a0:eb:42:6f:03:7f:b0:ab:6a:2c:46:52:3a:95:0f:c5
Serial Number (int): 308509722446892032824975397464825417502661
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:a7:30:22:60:b8:bb:18:b0:b5:6f:68:a3:cc:39:72:13:cb:22:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d9:94:0d:7f:92:c9:ad:4b:b2:c1:15:3f:c8:bc:f4:d0:21:03:c4:7b
Fingerprint (sha256): 08:72:01:d1:53:64:77:b6:50:72:ec:96:e8:6c:15:51:eb:55:cc:01:48:15:1b:aa:0e:df:d1:41:d3:5d:85:88

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nrostatic.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nrostatic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aasdsloth.gsm.cornell.edu
accreditation-dev.gatewaycc.edu
activityreport.msf.org
api-short.stg.gbci.org
apidevdocs.trinet.com
arica.gbci.org
asterialab.gbci.org
c10.nrostatic.com
cactqa.rutgers.edu
campaign.umd.edu
careers.wearedream.org
ci.boulder.co.us
cits.uwex.uwc.edu
climdyn.usc.edu
communitytestsite4.uaf.edu
communitytestsite5.uaf.edu
coronavirus.dev.purdue.edu
coronavirus.purdue.edu
dev-national-review.pantheon.io
dev-uwbwww.site1.uwb.edu
dornsife-audaciousgoals.usc.edu
dp-homepage.usc.edu
drupal.infusionsoft.com
dsbt.stg.gbci.org
ectvf.rice.edu
enrollment.honors.uga.edu
entrepreneurship.umd.edu
events.parchment.com
gast-togel.gbci.org
geodynamics.usc.edu
harvardheroes.harvard.edu
healthtalks.baptisthealth.com
id.gbci.org
idea.ipi-singapore.org
index.gsm.cornell.edu
interuss.lfprojects3.linuxfoundation.org
joukowsky.brown.edu
k12.presidio.edu
keste.nationalchickencouncil.org
ketse.nationalchickencouncil.org
ktes.nationalchickencouncil.org
learn.healthgrades.com
leedreviewerportal.gbci.org
m.beready2retire.com
mbet.ask.gbci.org
mc-staging-library.web.viu.ca
ndc.gbci.org
newhirebenefits.nortonlifelock.com
nolimitcity.gsm.cornell.edu
nrostatic.com
oceansciences.usc.edu
one.toronto.edu
origin-dev-developer.apmterminals.com
panth.ketogummy.org
pantheon03.slac.stanford.edu
peer.stg.gbci.org
peerlove.gbci.org
protect.dev.purdue.edu
protect.test.purdue.edu
rd.lls.edu
scearthquakes.dev.cofc.edu
search.gsm.cornell.edu
secret.gbci.org
stage.nationalparks.org
summitbrewing.com
test-uwbwww.site1.uwb.edu
www-ccd.usc.edu
www-dev.gccaz.edu
www.api-peer.stg.gbci.org
www.bienpartir.nestle.ca
www.harvardheroes.harvard.edu
www.peer.stg.gbci.org
www2.gbci.org
www3.gbci.org
ying77.krtv.com
zbane.gsm.cornell.edu

Other certificates including the domain name nrostatic.com

(limited to 100 certificates)
c0.nrostatic.com
5659456662667264-fe4.pantheonsite.io
ssl566633.cloudflaressl.com
bejih.com
5659456662667264-fe4.pantheonsite.io
bejih.com
nrostatic.com
ssl566634.cloudflaressl.com
ssl566634.cloudflaressl.com
bejih.com
aasdsloth.gsm.cornell.edu
5659456662667264-fe4.pantheonsite.io
ssl330377.cloudflaressl.com
bejih.com
5659456662667264-fe4.pantheonsite.io
5659456662667264-fe4.pantheonsite.io
5659456662667264-fe4.pantheonsite.io
ssl566634.cloudflaressl.com
5659456662667264-fe4.pantheonsite.io
bejih.com
5659456662667264-fe4.pantheonsite.io
5659456662667264-fe4.pantheonsite.io
5659456662667264-fe4.pantheonsite.io
aasdsloth.gsm.cornell.edu
ssl566632.cloudflaressl.com
5659456662667264-fe4.pantheonsite.io
ssl566633.cloudflaressl.com
bejih.com
bejih.com
ssl566632.cloudflaressl.com
5659456662667264-fe4.pantheonsite.io
5659456662667264-fe4.pantheonsite.io
c0.nrostatic.com
5659456662667264-fe4.pantheonsite.io
bejih.com
5659456662667264-fe4.pantheonsite.io
aasdsloth.gsm.cornell.edu
bejih.com
5659456662667264-fe4.pantheonsite.io
5659456662667264-fe4.pantheonsite.io
bejih.com
5659456662667264-fe4.pantheonsite.io
5659456662667264-fe4.pantheonsite.io
aasdsloth.gsm.cornell.edu
5659456662667264-fe4.pantheonsite.io
bejih.com
bejih.com
5659456662667264-fe4.pantheonsite.io
bejih.com
aasdsloth.gsm.cornell.edu
aasdsloth.gsm.cornell.edu
aasdsloth.gsm.cornell.edu
bejih.com
5659456662667264-fe4.pantheonsite.io
aasdsloth.gsm.cornell.edu
ssl330378.cloudflaressl.com
bejih.com
5659456662667264-fe4.pantheonsite.io
aasdsloth.gsm.cornell.edu
5659456662667264-fe4.pantheonsite.io
bejih.com
5659456662667264-fe4.pantheonsite.io
aasdsloth.gsm.cornell.edu
5659456662667264-fe4.pantheonsite.io
ssl566633.cloudflaressl.com
c1.nrostatic.com
5659456662667264-fe4.pantheonsite.io
5659456662667264-fe4.pantheonsite.io
aasdsloth.gsm.cornell.edu
bejih.com
5659456662667264-fe4.pantheonsite.io
5659456662667264-fe4.pantheonsite.io
ssl566633.cloudflaressl.com
aasdsloth.gsm.cornell.edu
ssl566633.cloudflaressl.com
5659456662667264-fe4.pantheonsite.io
5659456662667264-fe4.pantheonsite.io
5659456662667264-fe4.pantheonsite.io
bejih.com
5659456662667264-fe4.pantheonsite.io
bejih.com
bejih.com
5659456662667264-fe4.pantheonsite.io
bejih.com
bejih.com
bejih.com
bejih.com
5659456662667264-fe4.pantheonsite.io
bejih.com
bejih.com
ssl566633.cloudflaressl.com
5659456662667264-fe4.pantheonsite.io
bejih.com
5659456662667264-fe4.pantheonsite.io
5659456662667264-fe4.pantheonsite.io
bejih.com
5659456662667264-fe4.pantheonsite.io
bejih.com
5659456662667264-fe4.pantheonsite.io
bejih.com

Certificate

The complete raw certificate details for nrostatic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIL5zCCCs+gAwIBAgISA4qg60JvA3+wq2osRlI6lQ/FMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMjEwNDQwNDFaFw0yNDA2MTkwNDQwNDBaMBgxFjAUBgNVBAMT
DW5yb3N0YXRpYy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA
dKd6a/TBnNxcCAyQFBfO3CM0cWsekizlrGvPOt2XDtP4ZkBAs+JS9JmYXdJxFDU2
LvszvC++PxYqASbqSaQgayoSvU3BU7/0z5t8vh4/LXLBXztbHtk5VUrglYkypy06
1ZnKcnPeNfrs11rT70H77j83hMBoulSfG7zeYxpMv6X/zJiKfSIi3HFndhEy8vyg
w70FaoWKCEJKzN8ilG58YeOkR6h0ll7touLsNx4+/DJdlaL9qXVhB4J0WSumRyCT
ybKE/8A/NCOTdt0oCXApAN29BHhjdv5swlWJsNZWtWqMvP7JuloAmI6Mo6an00ML
otk8m6NWwT6a9hHzLZlVAgMBAAGjggkPMIIJCzAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFPqnMCJguLsYsLVvaKPMOXITyyIUMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ
QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz
Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv
MIIHFwYDVR0RBIIHDjCCBwqCGWFhc2RzbG90aC5nc20uY29ybmVsbC5lZHWCH2Fj
Y3JlZGl0YXRpb24tZGV2LmdhdGV3YXljYy5lZHWCFmFjdGl2aXR5cmVwb3J0Lm1z
Zi5vcmeCFmFwaS1zaG9ydC5zdGcuZ2JjaS5vcmeCFWFwaWRldmRvY3MudHJpbmV0
LmNvbYIOYXJpY2EuZ2JjaS5vcmeCE2FzdGVyaWFsYWIuZ2JjaS5vcmeCEWMxMC5u
cm9zdGF0aWMuY29tghJjYWN0cWEucnV0Z2Vycy5lZHWCEGNhbXBhaWduLnVtZC5l
ZHWCFmNhcmVlcnMud2VhcmVkcmVhbS5vcmeCEGNpLmJvdWxkZXIuY28udXOCEWNp
dHMudXdleC51d2MuZWR1gg9jbGltZHluLnVzYy5lZHWCGmNvbW11bml0eXRlc3Rz
aXRlNC51YWYuZWR1ghpjb21tdW5pdHl0ZXN0c2l0ZTUudWFmLmVkdYIaY29yb25h
dmlydXMuZGV2LnB1cmR1ZS5lZHWCFmNvcm9uYXZpcnVzLnB1cmR1ZS5lZHWCH2Rl
di1uYXRpb25hbC1yZXZpZXcucGFudGhlb24uaW+CGGRldi11d2J3d3cuc2l0ZTEu
dXdiLmVkdYIfZG9ybnNpZmUtYXVkYWNpb3VzZ29hbHMudXNjLmVkdYITZHAtaG9t
ZXBhZ2UudXNjLmVkdYIXZHJ1cGFsLmluZnVzaW9uc29mdC5jb22CEWRzYnQuc3Rn
LmdiY2kub3Jngg5lY3R2Zi5yaWNlLmVkdYIZZW5yb2xsbWVudC5ob25vcnMudWdh
LmVkdYIYZW50cmVwcmVuZXVyc2hpcC51bWQuZWR1ghRldmVudHMucGFyY2htZW50
LmNvbYITZ2FzdC10b2dlbC5nYmNpLm9yZ4ITZ2VvZHluYW1pY3MudXNjLmVkdYIZ
aGFydmFyZGhlcm9lcy5oYXJ2YXJkLmVkdYIdaGVhbHRodGFsa3MuYmFwdGlzdGhl
YWx0aC5jb22CC2lkLmdiY2kub3JnghZpZGVhLmlwaS1zaW5nYXBvcmUub3JnghVp
bmRleC5nc20uY29ybmVsbC5lZHWCKGludGVydXNzLmxmcHJvamVjdHMzLmxpbnV4
Zm91bmRhdGlvbi5vcmeCE2pvdWtvd3NreS5icm93bi5lZHWCEGsxMi5wcmVzaWRp
by5lZHWCIGtlc3RlLm5hdGlvbmFsY2hpY2tlbmNvdW5jaWwub3JngiBrZXRzZS5u
YXRpb25hbGNoaWNrZW5jb3VuY2lsLm9yZ4Ifa3Rlcy5uYXRpb25hbGNoaWNrZW5j
b3VuY2lsLm9yZ4IWbGVhcm4uaGVhbHRoZ3JhZGVzLmNvbYIbbGVlZHJldmlld2Vy
cG9ydGFsLmdiY2kub3JnghRtLmJlcmVhZHkycmV0aXJlLmNvbYIRbWJldC5hc2su
Z2JjaS5vcmeCHW1jLXN0YWdpbmctbGlicmFyeS53ZWIudml1LmNhggxuZGMuZ2Jj
aS5vcmeCIm5ld2hpcmViZW5lZml0cy5ub3J0b25saWZlbG9jay5jb22CG25vbGlt
aXRjaXR5LmdzbS5jb3JuZWxsLmVkdYINbnJvc3RhdGljLmNvbYIVb2NlYW5zY2ll
bmNlcy51c2MuZWR1gg9vbmUudG9yb250by5lZHWCJW9yaWdpbi1kZXYtZGV2ZWxv
cGVyLmFwbXRlcm1pbmFscy5jb22CE3BhbnRoLmtldG9ndW1teS5vcmeCHHBhbnRo
ZW9uMDMuc2xhYy5zdGFuZm9yZC5lZHWCEXBlZXIuc3RnLmdiY2kub3JnghFwZWVy
bG92ZS5nYmNpLm9yZ4IWcHJvdGVjdC5kZXYucHVyZHVlLmVkdYIXcHJvdGVjdC50
ZXN0LnB1cmR1ZS5lZHWCCnJkLmxscy5lZHWCGnNjZWFydGhxdWFrZXMuZGV2LmNv
ZmMuZWR1ghZzZWFyY2guZ3NtLmNvcm5lbGwuZWR1gg9zZWNyZXQuZ2JjaS5vcmeC
F3N0YWdlLm5hdGlvbmFscGFya3Mub3JnghFzdW1taXRicmV3aW5nLmNvbYIZdGVz
dC11d2J3d3cuc2l0ZTEudXdiLmVkdYIPd3d3LWNjZC51c2MuZWR1ghF3d3ctZGV2
LmdjY2F6LmVkdYIZd3d3LmFwaS1wZWVyLnN0Zy5nYmNpLm9yZ4IYd3d3LmJpZW5w
YXJ0aXIubmVzdGxlLmNhgh13d3cuaGFydmFyZGhlcm9lcy5oYXJ2YXJkLmVkdYIV
d3d3LnBlZXIuc3RnLmdiY2kub3Jngg13d3cyLmdiY2kub3Jngg13d3czLmdiY2ku
b3Jngg95aW5nNzcua3J0di5jb22CFXpiYW5lLmdzbS5jb3JuZWxsLmVkdTATBgNV
HSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AEiw42va
pkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjl+GnD0AAAQDAEcwRQIgaicy
nDiPVyP6qIbvUfMcHBkvTD1sl6qcRItD97/5UqYCIQDRYwmS5Uq+kD40601ymf9S
4pAOG68G6GboO9KgWVqEWAB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZx
H7WbAAABjl+GnHEAAAQDAEYwRAIgPm9+p46bgIg1kzvP0bMApoR8vv6qvFI7/3lD
Et/hEbACICFtGBGA3sVGFLz1SMfaGReBgLb1swZLLkmowycPGK4QMA0GCSqGSIb3
DQEBCwUAA4IBAQA8MFOHl+YW66pIyQrnUiUXajVLAg+7RykRFhOW3iT0HpmiP/gp
mOpzmbAhnVFRGBLIxAx/HNZ7zyEVerMaScOb8hKu3jYagFJ52AW2f/D/vgIrInu5
WckUeUooRc7/tc+yeTQnJ+JbSRgz7YHW0fbY2BbS9PV3KEOjtqLNByKjTI56SMKB
q/ITUAwgVGL58+dTicrV82W91uO+bWD0fXX6kGVt6/ovJJb3wfYGTbKbaBWaXWQH
5ucgx1aS7xzhBKsFcANqBFD8tnYQ93RSeNFXPoMSkiP3TVOkRKkgL/ykQfUMA5CI
v3NdwcAqiJIfxdjZFDr16rB+ilkCHJDA958f
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSnemv0wZzcXAgMkBQX
ztwjNHFrHpIs5axrzzrdlw7T+GZAQLPiUvSZmF3ScRQ1Ni77M7wvvj8WKgEm6kmk
IGsqEr1NwVO/9M+bfL4ePy1ywV87Wx7ZOVVK4JWJMqctOtWZynJz3jX67Nda0+9B
++4/N4TAaLpUnxu83mMaTL+l/8yYin0iItxxZ3YRMvL8oMO9BWqFighCSszfIpRu
fGHjpEeodJZe7aLi7DcePvwyXZWi/al1YQeCdFkrpkcgk8myhP/APzQjk3bdKAlw
KQDdvQR4Y3b+bMJVibDWVrVqjLz+ybpaAJiOjKOmp9NDC6LZPJujVsE+mvYR8y2Z
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308509722446892032824975397464825417502661
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 04:40:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 04:40:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nrostatic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295278889261962340330570593076765092564594026629510040566849443941721212705222905469227342749655760761925628146467776896918161669177237506061638055976839317974540229085566909601290432792766688540743857041618507082302908209321494362376641574366690514136936988276436757394515726000349835912320682069511736058985263380188984941851626522348036976567257123937402752130277851931257557691396509910741392947845349707974538616547869499133806197294376341097227039876415788275764051935080580783290065738507278734728703160147978353048962982659390140744073959855669537306275821116832669307766091573181749448001568724078979553621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							faa7302260b8bb18b0b56f68a3cc397213cb2214
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1806 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aasdsloth.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accreditation-dev.gatewaycc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activityreport.msf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-short.stg.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidevdocs.trinet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arica.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asterialab.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c10.nrostatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cactqa.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.wearedream.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.boulder.co.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cits.uwex.uwc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climdyn.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communitytestsite4.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communitytestsite5.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronavirus.dev.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronavirus.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-national-review.pantheon.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-uwbwww.site1.uwb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dornsife-audaciousgoals.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp-homepage.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drupal.infusionsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsbt.stg.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ectvf.rice.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrollment.honors.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entrepreneurship.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.parchment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gast-togel.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geodynamics.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvardheroes.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthtalks.baptisthealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idea.ipi-singapore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'index.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interuss.lfprojects3.linuxfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joukowsky.brown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k12.presidio.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keste.nationalchickencouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketse.nationalchickencouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ktes.nationalchickencouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.healthgrades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leedreviewerportal.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beready2retire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbet.ask.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mc-staging-library.web.viu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndc.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhirebenefits.nortonlifelock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nolimitcity.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrostatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceansciences.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.toronto.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-dev-developer.apmterminals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panth.ketogummy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantheon03.slac.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peer.stg.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peerlove.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protect.dev.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protect.test.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.lls.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scearthquakes.dev.cofc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secret.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nationalparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summitbrewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-uwbwww.site1.uwb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ccd.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.gccaz.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api-peer.stg.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bienpartir.nestle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harvardheroes.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peer.stg.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ying77.krtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zbane.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e5f869c3d000004030047304502206a27329c388f5723faa886ef51f31c1c192f4c3d6c97aa9c448b43f7bff952a6022100d1630992e54abe903e34eb4d7299ff52e2900e1baf06e866e83bd2a0595a8458007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e5f869c71000004030046304402203e6f7ea78e9b808835933bcfd1b300a6847cbefeaabc523bff794312dfe111b00220216d181180dec54614bcf548c7da19178180b6f5b3064b2e49a8c3270f18ae10
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003c30538797e616ebaa48c90ae75225176a354b020fbb472911161396de24f41e99a23ff82998ea7399b0219d51511812c8c40c7f1cd67bcf21157ab31a49c39bf212aede361a805279d805b67ff0ffbe022b227bb959c914794a2845ceffb5cfb279342727e25b491833ed81d6d1f6d8d816d2f4f5772843a3b6a2cd0722a34c8e7a48c281abf213500c205462f9f3e75389cad5f365bdd6e3be6d60f47d75fa90656debfa2f2496f7c1f6064db29b68159a5d6407e6e720c75692ef1ce104ab0570036a0450fcb67610f7745278d1573e83129223f74d53a444a9202ffca441f50c039088bf735dc1c02a88921fc5d8d9143af5eab07e8a59021c90c0f79f1f