secure.mdl.io

- Mindfireinc -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number e8:11:e1:4f:dc:ba:01:26:00:00:00:00:50:eb:a4:ca was issued on by Entrust, Inc..

With 120 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Mindfireinc

Organization: Mindfireinc
State / Province: California
Locality: Irvine
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e8:11:e1:4f:dc:ba:01:26:00:00:00:00:50:eb:a4:ca
Serial Number (int): 308473733938192802622583308262061089994
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9a:13:14:db:99:98:0b:ca:72:c5:b4:d2:50:6e:65:b0:a8:f3:49:52
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): a3:95:4b:57:c0:e8:22:98:77:09:5b:6f:b8:b9:eb:10:87:c1:88:67
Fingerprint (sha256): 0c:1f:d7:e1:23:a4:00:bc:3a:46:f0:d7:63:7b:96:e0:b2:47:81:03:dc:c1:d7:5c:d9:2b:84:e3:4e:1d:e0:63

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate secure.mdl.io

120

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.mdl.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.mdl.io
letsgo.lasell.edu
www.albion-college.com
www.BHGLoan.com
be.tabor.edu
www.BHGcards.com
www.bhgloans.com
www.BHGProLoan.com
www.borrowelastic.com
www.bhgpowercard.com
www.cnbgala.com
defineURLIFE.peace.edu
discover.onetoone.group
elevateuploader.com
go.monmouthcollege.edu
go.samford.edu
www.igive2epic.com
studio.mdl.io
welcometothefamily-customerdirect.m.mdl.io
petcothinkadoptionfirst.m.mdl.io
studio.afw.mdl.io
studio.dashboard.mdl.io
studio.admin.mdl.io
studio.purl.mdl.io
microsite.container.mdl.io
members.championshipcommitment.com
www.mercyineverycup.com
www.mybhgcards.com
www.mycapitalnow.com
www.opthanks.com
www.nominatestudentleaders.com
www.practitionerloans.com
quote.onetoone.group
rxgames.leehealthfoundation.org
www.rxgames.org
www.smhf-givegratitude.org
tracking.mdl.io
www.supportecfs.org
www.supporthm.org
applymjur.stmarytx.edu
urpromises.thomas.edu
*.my-dv.com
your.lr.edu
www.BHGLending.com
www.grouplegalplanoffer.com
www.investdbq.com
rewards.kewadin.com
www.applyelastic.com
itspersonal.martinmethodist.edu
be.hendrix.edu
www.metpdpnetworkdev.com
www.bhgandbanks.com
www.metpdp.com
www.umadnessinmarch.com
www.lake-watch.com
getsxm.com
igive2epic.com
www.getsxm.com
monitor.mdl.io
werhome.oc.edu
www.mobltycarpetone.com
elephants.win2wild.com
hippos.win2wild.com
rhinos.win2wild.com
www.btpeds.org
www.givingmu.com
citidemo.sandyinc.com
www.myprobucksgift.com
www.welcometoharvey.com
*.secure.mdl.io
www.edwardsupdate.ca
apply.keystone.edu
promise.keystone.edu
getinfo.cps.gwu.edu
www.lvcscholarship.com
optin.onestarrewards.com
www.keepitfrosty.com
www.BHGPersonal.com
theedge.guilford.edu
belongat.bw.edu
visit.bw.edu
www.firespringpromo.com
mymccalling.com
TFCadventure.com
DiscoverLACollege.com
theBCdifference.com
faulknerlawschool.com
discoverShorter.com
BPCforMe.com
TransfertoMC.com
YourMCcalling.com
flavors.centrisfcu.org
bstrong.wtamu.edu
extraordinary.rmc.edu
www.backtohastings.com
motiontosucceed.com
www.wpc4cc.com
www.supportsacredheartgreenwich.org
www.supportsbp.org
give.dwight.edu
www.cornhuskerbankpowerchecking.com
www.metdhmo.com
experience.coker.edu
darden-rfp.sandyesademo.com
imustgo.mhu.edu
www.getrisecredit.com
www.myemprisebank.com
go.belmontabbeycollege.edu
www.helpyourretirement.com
www.coffeewithtravis.com
www.fdlcrewards.com
www.arcfulfill.com
*.getkasasacash.com
*.getkasasacashback.com
www.yourelastic.com
www.c1mm.com
louisianacollegedigital.com
shorterudigital.com
onelimestone.com
www.rittersoffer.com

Other certificates including the domain name mdl.io

(limited to 100 certificates)
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
studio.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
studio.dashboard.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
*.mdl.io
secure.mdl.io
mdl.io
qa1.m.mdl.io
secure.mdl.io

Certificate

The complete raw certificate details for secure.mdl.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X9cpajqFgEdCZ+iMC5T
aEIIuxqEa/HN0ofFmq/lqtp33ja+FvPxWJMQom+knM8V7SCuVvZmB4SsBS0WuM3/
tvS10KhAU2Ffzp1YWoxiFyRXgbKcqGAhBw22bOrtWBSWUK/fdMoxp76xtCB9SsB/
qZfsianbV02APBVR/Qfy+FTgAGMLnWb9TUTNX5Pltv12qOTYTCDYRVM6wzyeddgA
rqP/c3JJF17EWopm/EVdFvEBv19TAduh3LN3BKZnrb7UVITRxs1ouwimoSgxx49B
Fm9FujTdykxdvr1q9zNH15NQCB9Al/Np6rEWjVIqM39UgI/muzaj3YdowDukQmRd
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308473733938192802622583308262061089994
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-31 19:44:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-21 20:14:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Irvine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mindfireinc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.mdl.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26951563452781109146057106392320226867107000374229101798015474952460603726911991854852083812187781988271179003750789017090612383066931286354568744127269341469194633587084064186594382380309598888000395093878687446126016630170284238938965547827285598923799327864755580089993702511150115546208965454260860994738074217442916082208995375929856279017354403501537507855236546290516823457160534480645279233472204278201703889873993923035009212008348742274919543512527007662929090692110470340849541123982874948530651309660094007907158238537985025279028193304796415915389367590604571312619101468167282531565955541987601938668817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2608 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letsgo.lasell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albion-college.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGLoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.tabor.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGProLoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borrowelastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgpowercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cnbgala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defineURLIFE.peace.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.onetoone.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elevateuploader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.monmouthcollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.samford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igive2epic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcometothefamily-customerdirect.m.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petcothinkadoptionfirst.m.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.afw.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.dashboard.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.admin.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.purl.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsite.container.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.championshipcommitment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercyineverycup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybhgcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycapitalnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opthanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nominatestudentleaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.practitionerloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quote.onetoone.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxgames.leehealthfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rxgames.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smhf-givegratitude.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportecfs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supporthm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applymjur.stmarytx.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urpromises.thomas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my-dv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'your.lr.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGLending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grouplegalplanoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investdbq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewards.kewadin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applyelastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itspersonal.martinmethodist.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.hendrix.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metpdpnetworkdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgandbanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metpdp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umadnessinmarch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lake-watch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getsxm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igive2epic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getsxm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werhome.oc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobltycarpetone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elephants.win2wild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hippos.win2wild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhinos.win2wild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.btpeds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingmu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citidemo.sandyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myprobucksgift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welcometoharvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edwardsupdate.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.keystone.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promise.keystone.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getinfo.cps.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvcscholarship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optin.onestarrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepitfrosty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGPersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theedge.guilford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belongat.bw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visit.bw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firespringpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymccalling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'TFCadventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DiscoverLACollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theBCdifference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faulknerlawschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverShorter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'BPCforMe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'TransfertoMC.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'YourMCcalling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flavors.centrisfcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bstrong.wtamu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extraordinary.rmc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.backtohastings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motiontosucceed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wpc4cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportsacredheartgreenwich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportsbp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.dwight.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornhuskerbankpowerchecking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metdhmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.coker.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darden-rfp.sandyesademo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imustgo.mhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getrisecredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myemprisebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.belmontabbeycollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helpyourretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coffeewithtravis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdlcrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcfulfill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getkasasacash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getkasasacashback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourelastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.c1mm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisianacollegedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shorterudigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onelimestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rittersoffer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a1314db99980bca72c5b4d2506e65b0a8f34952
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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