inside.gc.cuny.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:05:05:4b:02:41:73:b3:0c:a6:08:bb:01:c4:52:45:34:30 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=inside.gc.cuny.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:05:05:4b:02:41:73:b3:0c:a6:08:bb:01:c4:52:45:34:30
Serial Number (int): 350157591169639450599562004772003246322736
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 04:44:6a:c8:a3:19:d5:b1:4a:73:7c:58:7f:b7:f5:6c:39:01:b2:62
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ef:24:4a:d6:16:96:21:24:eb:54:c0:0c:c2:05:d2:bc:2a:c2:58:8f
Fingerprint (sha256): 0c:15:9f:e0:92:52:05:30:22:0e:a5:e9:c3:ac:6c:87:c2:39:ac:50:82:51:e9:01:34:97:6a:1b:05:5f:39:30

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate inside.gc.cuny.edu

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for inside.gc.cuny.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

inside.gc.cuny.edu
inside.kjzz.org
internal.gcir.org
international.dev.oceana.org
internetcouncil.nacha.org
intranet.olivecrest.org
ip.earthjustice.org
ip.govdelivery.com
ipv6.earthjustice.org
ipv6.govdelivery.com
it-chat.web.arizona.edu
it.22squared.com
it.uahs.arizona.edu
iteachu.multidevcom.uaf.edu
japan.fia.org
jlinks.govdelivery.com
jml1.earthjustice.org
job.earthjustice.org
jobs.earthjustice.org
journaldev.naeyc.org
jp.mcny.org
jss-dc3.govdelivery.com
junk.dana.org
junk2.dana.org
jwplayer.essence.com
k8s.earthjustice.org
kamunanya.gaje.ethics3.pantheon.berkeley.edu
keajaiban.multidevcom.uaf.edu
kgqm.kjzz.org
kim.lovelace.shiatsusociety.org
kissingbug.arizona.edu
krypton.summer.harvard.edu
kubernetes.govdelivery.com
labellelab.asu.edu
laborlabsandbox.aflcio.org
lambda.usc.edu
landing.pacific.edu
lasota.multidevcom.uaf.edu
law.ss.pacific.edu
ldap.cscc.unc.edu
legacy.bricartsmedia.org
legacy.hq.philabundance.org
liberalarts.ss.pacific.edu
libre.estadio.com
lindsay.mcny.org
live-embed-atu.edu.help
live-legacy-cms.pantheonsite.io
live.aep.cornell.edu
live.bme.cornell.edu
live.cam.cornell.edu
live.mcgeorge.edu
live.ophd.pantheon.berkeley.edu
live.ucdavis.edu
lp.grad.online.udel.edu.help
lp.programs.carey.jhu.edu.help
m.ajc.org
m.religionnews.com
m.voiceofsandiego.org
magazine.merrimack.edu
mailams.ustelecom.org
make.engineering.asu.edu
makinghistory.gwu.edu
management.arizona.edu
mancai420.netimpact.org
mariajuana.netimpact.org
marketing.magicsoftware.com
marketingprojects.maryville.edu
mediaroom.livestrong.org
memberauth.audiology.org
microsites.globalwaters.org
mobile-data.skyandtelescope.com
mobile.ajc.org
mobilize.medika.life
msa2016.berkeley.edu
mtageniustransitchallenge.ny.gov
multidev1.gc.cuny.edu
nacopn3.naco.org
nanophotonics.asu.edu
nartc.fcm.arizona.edu
nartechedge.nar.realtor
nestlebaby.in.th
news.catholicschoolsbq.org
news.religionnews.com
newsite.as-coa.org
newsite.dev.cms1.asa.uw.edu
next.warnerpacific.edu
nobleenergyinc.com
pacific.edu
thepointalehouse.com
wptblog.org

Other certificates including the domain name cuny.edu

(limited to 100 certificates)
www.math.csi.cuny.edu
5684453372329984-fe2.pantheonsite.io
us.prod.campusgroups.com
*.gc.cuny.edu
*.csi.cuny.edu
ucdc.edu
csicampusnet.csi.cuny.edu
us.prod.campusgroups.com
guides.newman.baruch.cuny.edu
*.mhc.cuny.edu
mail.journalism.cuny.edu
eportfolios.macaulay.cuny.edu
libpapercut-vs.librarygp.citytech.cuny.edu
test.eis.uw.edu
qwifi.qc.cuny.edu
www.design-engineering.princeton.edu
5684453372329984-fe2.pantheonsite.io
nxterra.ucop.edu
ssa.ccny.cuny.edu
csi2-pps2.csi.cuny.edu
cslive.csi.cuny.edu
*.citytech.cuny.edu
mail.qc.cuny.edu
*.kbcc.cuny.edu
*.bmcc.cuny.edu
www.hcii.cs.cmu.edu
208.lsnc.net
5684453372329984-fe2.pantheonsite.io
*.citytech.cuny.edu
cunyba.us.reclaim.cloud
www.blogs.earthjustice.org
us.prod.campusgroups.com
qccommunity.qc.cuny.edu
*.citytech.cuny.edu
libcal.library.hunter.cuny.edu
5684453372329984-fe2.pantheonsite.io
library.citytech.cuny.edu
webdev.colorado.edu
virtual2.unlv.edu
5769928858664960-fe3.pantheonsite.io
5756915711737856-fe1.pantheonsite.io
mysite.qc.cuny.edu
*.york.ezproxy.cuny.edu
*.york.cuny.edu
5635703144710144-fe4.pantheonsite.io
upenn-it.asc.upenn.edu
*.qcc.cuny.edu
www.math.csi.cuny.edu
onesearch.cuny.edu
Collegiatelink4.Campuslabs.com
*.cuny.edu
csomlcms.cuny.edu
athletics.baruch.cuny.edu
senate.qc.cuny.edu
hub.meed.com
208.lsnc.net
webmail.exchtest.cuny.edu
*.cuny.edu
vision.cs.qc.cuny.edu
newmedialab.cuny.edu
dev.wellness.yale.edu
nml-jail.newmedialab.cuny.edu
qc.cuny.edu
*.gc.cuny.edu
go.journalism.cuny.edu
cunyba.cuny.edu
lib01.bcc.cuny.edu
hr.hunter.cuny.edu
live.ucdavis.edu
info-dev.calperformances.org
websql.brooklyn.cuny.edu
ldapmaint.ccny.cuny.edu
*.gc.cuny.edu
towa.tlehman.cuny.edu
ww2.hunter.cuny.edu
us.prod.campusgroups.com
libcal.library.hunter.cuny.edu
libcal.library.hunter.cuny.edu
good.gsm.cornell.edu
archivesspace.library.csi.cuny.edu
gold.cs.qc.cuny.edu
newlaborforum.cuny.edu
www.lgcr.com
cetls.bmcc.cuny.edu
pwdregister.bcc.cuny.edu
www.nai.arizona.edu
upenn-it.asc.upenn.edu
library.hunter.cuny.edu
mymail.baruch.cuny.edu
nistmep.blogs.govdelivery.com
spstime.sps.cuny.edu
*.cuny.edu
dev.embody.yale.edu
scalefunder.net
scalefunder.net
club.kjzz.org
cunyba.us.reclaim.cloud
help.brooklyn.cuny.edu
us.prod.campusgroups.com
asianamericanyc.hunter.cuny.edu

Certificate

The complete raw certificate details for inside.gc.cuny.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw46iRMF7hwNtVI+uKl5U
F0CD5U3UkQMeBF8svfU9dGopQU40Ing2QVq1B+BFMG1Mn7ICzhEdYaQd/8z2o4yC
SvEOruHHbvRx9j8NrkB2VDdThoomFKEa0Ycr+N7Jt9BiGuqfFFcgkf3J61GgtdOf
eb3u1E1vLfFD14HJmJGlDtvFwp7KtZmSuKnUDvttZApeghzlw1S+QrS7sZo5epN5
As25V4MVnW5dTJFTfmhnbB9vkhJDh+O6DeLYszX0dSxVrsGI66gIDvk8vwZ1a2is
lILGQ2WDC/2oWV2R+PvWHZuUKqzLGtROWGuvZLR0QziNDryF+cVGICsOtMyOuvv4
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350157591169639450599562004772003246322736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-09 18:27:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-09 18:26:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'inside.gc.cuny.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24686804846986700463286235473113579310640311389133520587690101062602581528438869452339616892952701902849061179936484875175962958584343852540185544183047237885328788321992471394861784671407872629842251491403749912828485536459849583589245555154424957554500881276697578384568150008763221433348736210875490343848174039032910683409070497266386346837523561884554602537558352214849828580677730541219147370984863199779155273255284942666036956568962165193514919553059246300356407560953783348314569168119667241859434381348711752591025577632034019588909291610597210916265772008296336673389410930207470033159467095714263857887333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04446ac8a319d5b14a737c587fb7f56c3901b262
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.gc.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.kjzz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.gcir.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetcouncil.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.olivecrest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ip.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ip.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv6.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv6.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-chat.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.22squared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iteachu.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japan.fia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlinks.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jml1.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'job.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journaldev.naeyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jss-dc3.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junk.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junk2.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwplayer.essence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k8s.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamunanya.gaje.ethics3.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keajaiban.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kgqm.kjzz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kim.lovelace.shiatsusociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kissingbug.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krypton.summer.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubernetes.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labellelab.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laborlabsandbox.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambda.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasota.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldap.cscc.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.bricartsmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.hq.philabundance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberalarts.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libre.estadio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindsay.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-embed-atu.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-legacy-cms.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.bme.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.mcgeorge.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.grad.online.udel.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.programs.carey.jhu.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ajc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.voiceofsandiego.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.merrimack.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailams.ustelecom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'make.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'management.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mancai420.netimpact.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariajuana.netimpact.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.magicsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingprojects.maryville.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaroom.livestrong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memberauth.audiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsites.globalwaters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-data.skyandtelescope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.ajc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilize.medika.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msa2016.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtageniustransitchallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multidev1.gc.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nacopn3.naco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanophotonics.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartechedge.nar.realtor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlebaby.in.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.catholicschoolsbq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsite.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsite.dev.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.warnerpacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nobleenergyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepointalehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wptblog.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184f85af0db000004030046304402200fd1d1072c110b872ca693d0a53e9cc09cca7b1aeac3dff1cd0b79e23f514a0402203b589a7de85e7a28e5f6467c68973e6a5e5414a59d04d6ae6ef077c38fa9758e0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000184f85af1030000040300483046022100da0c6db526c280bd4723088ed9c6f1aff98b4cafb967ddc0b17c8d5caa0c06a8022100c57487518775cb7953dc897bd22c046580714400eb4f807237c7b0b426ea413a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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