secure.mdl.io

- Mindfireinc -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 74:5b:01:a5:f6:11:94:0d:00:00:00:00:50:eb:9e:d8 was issued on by Entrust, Inc..

With 119 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Mindfireinc

Organization: Mindfireinc
State / Province: California
Locality: Irvine
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 74:5b:01:a5:f6:11:94:0d:00:00:00:00:50:eb:9e:d8
Serial Number (int): 154662979956387892381355494309821652696
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 9a:13:14:db:99:98:0b:ca:72:c5:b4:d2:50:6e:65:b0:a8:f3:49:52
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 06:8d:9e:bf:38:fe:d3:49:a5:64:81:24:70:4f:f3:3b:2d:50:12:e4
Fingerprint (sha256): 0c:49:fe:ef:61:32:bb:57:28:e9:9c:b9:04:78:70:07:98:da:70:fd:b8:b7:09:e9:fb:2a:0c:0c:a0:8a:b7:c0

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate secure.mdl.io

119

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.mdl.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.mdl.io
letsgo.lasell.edu
www.albion-college.com
www.BHGLoan.com
be.tabor.edu
www.BHGcards.com
www.bhgloans.com
www.BHGProLoan.com
www.borrowelastic.com
www.bhgpowercard.com
www.cnbgala.com
defineURLIFE.peace.edu
discover.onetoone.group
elevateuploader.com
go.monmouthcollege.edu
go.samford.edu
www.igive2epic.com
studio.mdl.io
welcometothefamily-customerdirect.m.mdl.io
petcothinkadoptionfirst.m.mdl.io
studio.afw.mdl.io
studio.dashboard.mdl.io
studio.admin.mdl.io
studio.purl.mdl.io
microsite.container.mdl.io
members.championshipcommitment.com
www.mercyineverycup.com
www.mybhgcards.com
www.mycapitalnow.com
www.opthanks.com
www.nominatestudentleaders.com
www.practitionerloans.com
quote.onetoone.group
rxgames.leehealthfoundation.org
www.rxgames.org
www.smhf-givegratitude.org
tracking.mdl.io
www.supportecfs.org
www.supporthm.org
applymjur.stmarytx.edu
urpromises.thomas.edu
*.my-dv.com
your.lr.edu
www.BHGLending.com
www.grouplegalplanoffer.com
www.investdbq.com
rewards.kewadin.com
www.applyelastic.com
itspersonal.martinmethodist.edu
be.hendrix.edu
www.metpdpnetworkdev.com
www.bhgandbanks.com
www.metpdp.com
www.umadnessinmarch.com
www.lake-watch.com
getsxm.com
igive2epic.com
www.getsxm.com
monitor.mdl.io
werhome.oc.edu
www.mobltycarpetone.com
elephants.win2wild.com
hippos.win2wild.com
rhinos.win2wild.com
www.btpeds.org
www.givingmu.com
citidemo.sandyinc.com
www.myprobucksgift.com
www.welcometoharvey.com
*.secure.mdl.io
www.edwardsupdate.ca
apply.keystone.edu
promise.keystone.edu
getinfo.cps.gwu.edu
www.lvcscholarship.com
optin.onestarrewards.com
www.keepitfrosty.com
www.BHGPersonal.com
theedge.guilford.edu
belongat.bw.edu
visit.bw.edu
www.firespringpromo.com
mymccalling.com
TFCadventure.com
DiscoverLACollege.com
theBCdifference.com
faulknerlawschool.com
discoverShorter.com
BPCforMe.com
TransfertoMC.com
YourMCcalling.com
flavors.centrisfcu.org
bstrong.wtamu.edu
extraordinary.rmc.edu
www.backtohastings.com
motiontosucceed.com
www.wpc4cc.com
www.supportsacredheartgreenwich.org
www.supportsbp.org
give.dwight.edu
www.cornhuskerbankpowerchecking.com
www.metdhmo.com
experience.coker.edu
darden-rfp.sandyesademo.com
imustgo.mhu.edu
www.getrisecredit.com
www.myemprisebank.com
go.belmontabbeycollege.edu
www.helpyourretirement.com
www.coffeewithtravis.com
www.fdlcrewards.com
www.arcfulfill.com
*.getkasasacash.com
*.getkasasacashback.com
www.yourelastic.com
www.c1mm.com
louisianacollegedigital.com
shorterudigital.com
onelimestone.com

Other certificates including the domain name mdl.io

(limited to 100 certificates)
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
studio.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
studio.dashboard.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
*.mdl.io
secure.mdl.io
mdl.io
qa1.m.mdl.io
secure.mdl.io

Certificate

The complete raw certificate details for secure.mdl.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X9cpajqFgEdCZ+iMC5T
aEIIuxqEa/HN0ofFmq/lqtp33ja+FvPxWJMQom+knM8V7SCuVvZmB4SsBS0WuM3/
tvS10KhAU2Ffzp1YWoxiFyRXgbKcqGAhBw22bOrtWBSWUK/fdMoxp76xtCB9SsB/
qZfsianbV02APBVR/Qfy+FTgAGMLnWb9TUTNX5Pltv12qOTYTCDYRVM6wzyeddgA
rqP/c3JJF17EWopm/EVdFvEBv19TAduh3LN3BKZnrb7UVITRxs1ouwimoSgxx49B
Fm9FujTdykxdvr1q9zNH15NQCB9Al/Np6rEWjVIqM39UgI/muzaj3YdowDukQmRd
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 154662979956387892381355494309821652696
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-28 19:57:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-21 20:27:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Irvine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mindfireinc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.mdl.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26951563452781109146057106392320226867107000374229101798015474952460603726911991854852083812187781988271179003750789017090612383066931286354568744127269341469194633587084064186594382380309598888000395093878687446126016630170284238938965547827285598923799327864755580089993702511150115546208965454260860994738074217442916082208995375929856279017354403501537507855236546290516823457160534480645279233472204278201703889873993923035009212008348742274919543512527007662929090692110470340849541123982874948530651309660094007907158238537985025279028193304796415915389367590604571312619101468167282531565955541987601938668817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2586 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letsgo.lasell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albion-college.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGLoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.tabor.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGProLoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borrowelastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgpowercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cnbgala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defineURLIFE.peace.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.onetoone.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elevateuploader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.monmouthcollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.samford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igive2epic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcometothefamily-customerdirect.m.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petcothinkadoptionfirst.m.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.afw.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.dashboard.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.admin.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.purl.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsite.container.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.championshipcommitment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercyineverycup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybhgcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycapitalnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opthanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nominatestudentleaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.practitionerloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quote.onetoone.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxgames.leehealthfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rxgames.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smhf-givegratitude.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportecfs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supporthm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applymjur.stmarytx.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urpromises.thomas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my-dv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'your.lr.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGLending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grouplegalplanoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investdbq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewards.kewadin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applyelastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itspersonal.martinmethodist.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.hendrix.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metpdpnetworkdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgandbanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metpdp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umadnessinmarch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lake-watch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getsxm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igive2epic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getsxm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werhome.oc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobltycarpetone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elephants.win2wild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hippos.win2wild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhinos.win2wild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.btpeds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingmu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citidemo.sandyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myprobucksgift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welcometoharvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edwardsupdate.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.keystone.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promise.keystone.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getinfo.cps.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvcscholarship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optin.onestarrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepitfrosty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGPersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theedge.guilford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belongat.bw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visit.bw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firespringpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymccalling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'TFCadventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DiscoverLACollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theBCdifference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faulknerlawschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverShorter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'BPCforMe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'TransfertoMC.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'YourMCcalling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flavors.centrisfcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bstrong.wtamu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extraordinary.rmc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.backtohastings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motiontosucceed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wpc4cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportsacredheartgreenwich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportsbp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.dwight.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornhuskerbankpowerchecking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metdhmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.coker.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darden-rfp.sandyesademo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imustgo.mhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getrisecredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myemprisebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.belmontabbeycollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helpyourretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coffeewithtravis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdlcrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcfulfill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getkasasacash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getkasasacashback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourelastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.c1mm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisianacollegedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shorterudigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onelimestone.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a1314db99980bca72c5b4d2506e65b0a8f34952
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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