valleyymca.org
Issued by R3
About this certificate
This digital certificate with serial number 03:35:14:ce:ea:8a:51:32:af:22:71:a2:5a:4a:b6:10:69:ba was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=valleyymca.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:35:14:ce:ea:8a:51:32:af:22:71:a2:5a:4a:b6:10:69:baSerial Number (int): 279399482172201498235975485605565915228602
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a9:ce:31:f5:a8:9b:c0:cb:a2:15:03:45:f0:e5:80:1c:93:96:df:50
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 48:0e:52:be:62:35:66:b0:81:cb:06:6c:5c:04:81:08:1c:07:9c:24
Fingerprint (sha256): 0c:b1:bd:8d:2f:5b:54:e4:ec:aa:5c:cb:49:24:12:83:5c:f0:0e:2a:9f:ac:26:0e:91:fc:e5:81:56:81:1b:74
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate valleyymca.org
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for valleyymca.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.valleyymca.org
*.vosymca.com
valleyymca.org
vosymca.com
vosymca.com.valleyymca.org
vosymca.org
www.adfs.valleyymca.org
www.register.valleyymca.org
www.staging.valleyymca.org
www.vosymca.com.valleyymca.org
www.vosymca.org
www.ymcaoffers.valleyymca.org
*.vosymca.com
valleyymca.org
vosymca.com
vosymca.com.valleyymca.org
vosymca.org
www.adfs.valleyymca.org
www.register.valleyymca.org
www.staging.valleyymca.org
www.vosymca.com.valleyymca.org
www.vosymca.org
www.ymcaoffers.valleyymca.org
Other certificates including the domain name valleyymca.org
(limited to 100 certificates)
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
adfs.valleyymca.org
5709436928655360-fe2.pantheonsite.io
register.valleyymca.org
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
securedns4.planmygift.org
fsus-2.freshservice.com
*.valleyymca.org
valleyymca.org
5709436928655360-fe2.pantheonsite.io
help.cei.com
5709436928655360-fe2.pantheonsite.io
valleyymcacares.com
fsus-2.freshservice.com
securedns4.planmygift.org
5709436928655360-fe2.pantheonsite.io
fsus-2.freshservice.com
fsus-2.freshservice.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
securedns4.planmygift.org
register.valleyymca.org
fsus-2.freshservice.com
fsus-2.freshservice.com
securedns4.planmygift.org
securedns4.planmygift.org
5709436928655360-fe2.pantheonsite.io
help.cei.com
fsus-2.freshservice.com
help.cei.com
5709436928655360-fe2.pantheonsite.io
fsus-2.freshservice.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
adfs.valleyymca.org
register.valleyymca.org
fsus-2.freshservice.com
ymcaoffers.valleyymca.org
valleyymcacares.org
fsus-2.freshservice.com
securedns4.planmygift.org
register.valleyymca.org
help.cei.com
5709436928655360-fe2.pantheonsite.io
adfs.valleyymca.org
adfs.valleyymca.org
5709436928655360-fe2.pantheonsite.io
register.valleyymca.org
5709436928655360-fe2.pantheonsite.io
valleyymca.org
ymcaoffers.valleyymca.org
fsus-2.freshservice.com
www.azymcas.valleyymca.org
help.cei.com
fsus-2.freshservice.com
5709436928655360-fe2.pantheonsite.io
*.valleyymca.org
fsus-2.freshservice.com
securedns4.planmygift.org
register.valleyymca.org
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
fsus-2.freshservice.com
securedns4.planmygift.org
fsus-2.freshservice.com
*.valleyymca.org
fsus-2.freshservice.com
fsus-2.freshservice.com
5709436928655360-fe2.pantheonsite.io
securedns4.planmygift.org
fsus-2.freshservice.com
5709436928655360-fe2.pantheonsite.io
fsus-2.freshservice.com
*.valleyymca.org
5709436928655360-fe2.pantheonsite.io
securecounter.com
help.cei.com
fsus-2.freshservice.com
help.cei.com
securecounter.com
fsus-2.freshservice.com
securecounter.com
valleyymca.org
5709436928655360-fe2.pantheonsite.io
fsus-2.freshservice.com
fsus-2.freshservice.com
valleyymcacares.org
help.cei.com
securedns4.planmygift.org
5709436928655360-fe2.pantheonsite.io
help.cei.com
ymcagovernance.org
fsus-2.freshservice.com
help.cei.com
valleyymca.org
securedns4.planmygift.org
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
adfs.valleyymca.org
5709436928655360-fe2.pantheonsite.io
register.valleyymca.org
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
securedns4.planmygift.org
fsus-2.freshservice.com
*.valleyymca.org
valleyymca.org
5709436928655360-fe2.pantheonsite.io
help.cei.com
5709436928655360-fe2.pantheonsite.io
valleyymcacares.com
fsus-2.freshservice.com
securedns4.planmygift.org
5709436928655360-fe2.pantheonsite.io
fsus-2.freshservice.com
fsus-2.freshservice.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
securedns4.planmygift.org
register.valleyymca.org
fsus-2.freshservice.com
fsus-2.freshservice.com
securedns4.planmygift.org
securedns4.planmygift.org
5709436928655360-fe2.pantheonsite.io
help.cei.com
fsus-2.freshservice.com
help.cei.com
5709436928655360-fe2.pantheonsite.io
fsus-2.freshservice.com
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
adfs.valleyymca.org
register.valleyymca.org
fsus-2.freshservice.com
ymcaoffers.valleyymca.org
valleyymcacares.org
fsus-2.freshservice.com
securedns4.planmygift.org
register.valleyymca.org
help.cei.com
5709436928655360-fe2.pantheonsite.io
adfs.valleyymca.org
adfs.valleyymca.org
5709436928655360-fe2.pantheonsite.io
register.valleyymca.org
5709436928655360-fe2.pantheonsite.io
valleyymca.org
ymcaoffers.valleyymca.org
fsus-2.freshservice.com
www.azymcas.valleyymca.org
help.cei.com
fsus-2.freshservice.com
5709436928655360-fe2.pantheonsite.io
*.valleyymca.org
fsus-2.freshservice.com
securedns4.planmygift.org
register.valleyymca.org
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
5709436928655360-fe2.pantheonsite.io
fsus-2.freshservice.com
securedns4.planmygift.org
fsus-2.freshservice.com
*.valleyymca.org
fsus-2.freshservice.com
fsus-2.freshservice.com
5709436928655360-fe2.pantheonsite.io
securedns4.planmygift.org
fsus-2.freshservice.com
5709436928655360-fe2.pantheonsite.io
fsus-2.freshservice.com
*.valleyymca.org
5709436928655360-fe2.pantheonsite.io
securecounter.com
help.cei.com
fsus-2.freshservice.com
help.cei.com
securecounter.com
fsus-2.freshservice.com
securecounter.com
valleyymca.org
5709436928655360-fe2.pantheonsite.io
fsus-2.freshservice.com
fsus-2.freshservice.com
valleyymcacares.org
help.cei.com
securedns4.planmygift.org
5709436928655360-fe2.pantheonsite.io
help.cei.com
ymcagovernance.org
fsus-2.freshservice.com
help.cei.com
valleyymca.org
securedns4.planmygift.org
5709436928655360-fe2.pantheonsite.io
Certificate
The complete raw certificate details for valleyymca.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgISAzUUzuqKUTKvInGiWkq2EGm6MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjEwMDUzMjVaFw0yNDA3MjAwMDUzMjRaMBkxFzAVBgNVBAMT DnZhbGxleXltY2Eub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA 7YAeKHaZC/wKPQZB5TY47jf4Buu+MS43fQBGTarH8MXXp/zVEKfyQuCzhKCidD6T mZKbK1Hi8B9yYh6yCBazQssHa6tnozx+Awvw/ioRNavIwecTOTol5yipqsbUceJe k4f1+Beeb7MRoV/JTQxnEo5AfjljI9doeFaYq+fUZtYZJgBeB2F6AIJegbqkKqnn nEqsao2KQYTGD4C2XAwsug5kF7i0IuyfN/yEN4ixJ0jCKw8wkPpfIGW16t/6sds/ E7aAyT1hyooNDtzdFhbxN1tGby1zqR0uFGFrDQMQIipB7jt4nYuk71ifz5vfGS4Q DzCm8XjsbqLjzHUGpLr/lwIDAQABo4IDDjCCAwowDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBSpzjH1qJvAy6IVA0Xw5YAck5bfUDAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzCCARYGA1UdEQSCAQ0wggEJghAqLnZhbGxleXltY2Eub3Jngg0qLnZvc3ltY2Eu Y29tgg52YWxsZXl5bWNhLm9yZ4ILdm9zeW1jYS5jb22CGnZvc3ltY2EuY29tLnZh bGxleXltY2Eub3Jnggt2b3N5bWNhLm9yZ4IXd3d3LmFkZnMudmFsbGV5eW1jYS5v cmeCG3d3dy5yZWdpc3Rlci52YWxsZXl5bWNhLm9yZ4Iad3d3LnN0YWdpbmcudmFs bGV5eW1jYS5vcmeCHnd3dy52b3N5bWNhLmNvbS52YWxsZXl5bWNhLm9yZ4IPd3d3 LnZvc3ltY2Eub3Jngh13d3cueW1jYW9mZmVycy52YWxsZXl5bWNhLm9yZzATBgNV HSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AHb/iD8K tvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjv5bryYAAAQDAEYwRAIgAuDh Ad7PA7E/bNiynED5ZCkFyNSGoz3eSaQcMfdqWp8CIGjdQztvSVVgTkyzbJIdoLQK 8lGDCPa3SMBKPlgVCMCYAHYA3+FW66oFr7WcD4ZxjajAMk6uVtlup/WlagHRwTu+ UlwAAAGO/luvpwAABAMARzBFAiATjVgxLxsC/xvfjY9D2sbB29FKlZ9CYojhURO/ QMGskQIhAOvgNvaqAPWfInVJk9e6iaiKTBeXDgKfy363EODZOrCTMA0GCSqGSIb3 DQEBCwUAA4IBAQBwkXHmgy1TGx1Lt8Jw846IVpLMEDNy5RhtbOwTzqQUr31ztQXE qcVU7bvflH+7C3+JcIKX/BKUhfS6a1MaYGAT1j9M3Z/eDS//9WyIqP5UiA500xBJ 1N2cxS6K9r+in5XNHDAWt5upBNe4LC/lFS52RiHIr+oA+bayNycV97tdqBJKWtBH PxamQWqCMb2xtyN0pXELWSZQOXjYblBd07X/9pckZ/bQbZpRqCbglkfUOr3wsC71 yMG6sLi9/hzVnRz6/9sebcKyIO+1xk6AwaI1HAZOffO0BaFObLZf0jNmAXp+F1yA CiYMr+EnwI6mzK4nJgRdaqj3mDFRjkGwly2W -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YAeKHaZC/wKPQZB5TY4 7jf4Buu+MS43fQBGTarH8MXXp/zVEKfyQuCzhKCidD6TmZKbK1Hi8B9yYh6yCBaz QssHa6tnozx+Awvw/ioRNavIwecTOTol5yipqsbUceJek4f1+Beeb7MRoV/JTQxn Eo5AfjljI9doeFaYq+fUZtYZJgBeB2F6AIJegbqkKqnnnEqsao2KQYTGD4C2XAws ug5kF7i0IuyfN/yEN4ixJ0jCKw8wkPpfIGW16t/6sds/E7aAyT1hyooNDtzdFhbx N1tGby1zqR0uFGFrDQMQIipB7jt4nYuk71ifz5vfGS4QDzCm8XjsbqLjzHUGpLr/ lwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 279399482172201498235975485605565915228602 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-21 00:53:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-20 00:53:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'valleyymca.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29981655521210353288612737121541651683480641051182764997893051233458726100355752045026129420737480861053582501078385020497154376640336231323068334328435916755270018257330534261697780672591400589376357836702762660481022735157352464806282343764256786490794204261672797865279236071623965208902337036071293219726663514326838023069147392168796742166032182673359259268345926502132286414467478713742924124961617569833149214096000658983764885218116601691150387008300321199245889195327162883083688143683836557744424737473091282859698965751886595972445848162155303009484656700143994727084188212308956461358475598125252080238487 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a9ce31f5a89bc0cba2150345f0e5801c9396df50 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (269 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valleyymca.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vosymca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleyymca.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vosymca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vosymca.com.valleyymca.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vosymca.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adfs.valleyymca.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.register.valleyymca.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.valleyymca.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vosymca.com.valleyymca.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vosymca.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ymcaoffers.valleyymca.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018efe5baf260000040300463044022002e0e101decf03b13f6cd8b29c40f9642905c8d486a33dde49a41c31f76a5a9f022068dd433b6f4955604e4cb36c921da0b40af2518308f6b748c04a3e581508c098007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018efe5bafa700000403004730450220138d58312f1b02ff1bdf8d8f43dac6c1dbd14a959f426288e15113bf40c1ac91022100ebe036f6aa00f59f22754993d7ba89a88a4c17970e029fcb7eb710e0d93ab093 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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