advertising.gsm.cornell.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:3a:ce:89:70:60:8b:08:a5:93:c1:3b:98:b7:2f:cf:0d:5b was issued on by Let's Encrypt.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=advertising.gsm.cornell.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3a:ce:89:70:60:8b:08:a5:93:c1:3b:98:b7:2f:cf:0d:5b
Serial Number (int): 281347769667775290841994971386626161184091
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:fd:9c:5c:25:27:f7:3d:a7:63:fa:00:6a:0c:82:e1:98:41:d4:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 20:d2:4c:68:ef:05:b4:e7:6a:d7:03:15:59:99:79:6b:6d:34:b0:9a
Fingerprint (sha256): 0c:d2:7b:33:06:69:1f:85:c6:ca:d9:af:75:f3:8a:6c:62:b9:08:26:5e:d9:aa:21:93:94:c7:1a:36:32:1d:37

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate advertising.gsm.cornell.edu

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for advertising.gsm.cornell.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advertising.gsm.cornell.edu
agen-togel.gsm.cornell.edu
bandar-togel-terpercaya.gsm.cornell.edu
beamhit.com
bola-setan.gsm.cornell.edu
criminalminds-dev.gsm.cornell.edu
criminalminds-test.gsm.cornell.edu
criminalminds.gsm.cornell.edu
daftar-bandar-togel.gsm.cornell.edu
danatogel.gsm.cornell.edu
dev-portal.fastshop.com.br
dhis2symposium.com
dominoqq.gsm.cornell.edu
edukasi.m.gsm.cornell.edu
gsa-dev.ucsc.edu
hokibos.test.webservices.umich.edu
jonescompanies.com
local.fourwindsinteractive.com
m.advertising.gsm.cornell.edu
m.structures.gsm.cornell.edu
mcleodinc.com
midwesthomeenergy.com
mobile.coraldds.com
nujuvena.com
partnerships.advanced.jhu.edu
pinc-staging.sfsu.edu
ppd-staging.sfsu.edu
radiology.virginia.edu
safersex4seniors.org
scers.net
script.m.gsm.cornell.edu
serviceaide.com.br
situs-bandar-togel.gsm.cornell.edu
situs-slot.gsm.cornell.edu
situs-togel-online.gsm.cornell.edu
situs-togel-terpercaya.gsm.cornell.edu
situs-togel.gsm.cornell.edu
situstogelhadiah.gsm.cornell.edu
situstogelonline.gsm.cornell.edu
skelmer.com
slot-jepang.gsm.cornell.edu
slot-mahjong.gsm.cornell.edu
smokingrillin.com
smtp.foresiteelectric.com
steve.ps-pantheon.com
texaslawhelp.net
thevictoryapts.com
togel-hari-ini.gsm.cornell.edu
usbioplastics.com
usw8-597.org
vivasvisual.com
wrirossprize.com
www.acc.gsm.cornell.edu
www.allstarexteriorsllc.com
www.americansforhealthsafety.org
www.gracedome.com
www.hub.meed.com
www.m.gsm.cornell.edu
www.meritemploy.com
www.mycalstrs.org
www.obecorp.es
www.obrasespecialeschile.cl
www.savemyira.org
www.thejulliardstore.com
www.togel.gsm.cornell.edu
wwwchi.ezesoft.com
yvonnespicerformayor.info
yvonnespicerformayor.org

Other certificates including the domain name cornell.edu

(limited to 100 certificates)
usda-int.library.cornell.edu
island.cnf.cornell.edu
dbme.dyson.cornell.edu
www.llmoverview.law.cornell.edu
dfbs.cornell.edu
engr-cms-multi-ssl.cit.cornell.edu
staticweb.ssit.scl.cornell.edu
atstaticapps.cit.cornell.edu
ubsc.cornell.edu
newstudents.cornell.edu
test-web-lws.edu.help
www.nys4h.cce.cornell.edu
5769623379116032-fe2.pantheonsite.io
carpepm.almonds.com
5693048138760192-fe2.pantheonsite.io
*.givegab.com
dns-vetting1c.map.fastly.net
5686812383117312-fe3.pantheonsite.io
allianceforscience.cornell.edu
scholarship.sha.cornell.edu
vertere.ehs.cornell.edu
llmoverview.law.cornell.edu
5764748591235072-fe2.pantheonsite.io
5747286126624768-fe3.pantheonsite.io
manage.esign.cornell.edu
fs-lb-1.fs.cornell.edu
it.uahs.arizona.edu
www.pryde.bctr.cornell.edu
cluster3.technolutions.net
lingual.phonetics.cornell.edu
boomresume.cis.cornell.edu
apl.cs.cornell.edu
annualreport.cals.cornell.edu
crane.chem.cornell.edu
badwall.cac.cornell.edu
resumebook.acsu.cornell.edu
scabusa.ag.cornell.edu
5727217287954432-fe1.pantheonsite.io
3cpg.cornell.edu
ucdc.edu
cluster3.technolutions.net
classcouncil.cornell.edu
5693048138760192-fe2.pantheonsite.io
5202656289095680-fe4.pantheonsite.io
kanbur.aem.cornell.edu
cals.cornell.edu
5691420614590464-fe3.pantheonsite.io
aws-110-042.internal.library.cornell.edu
5709068098338816-fe3.pantheonsite.io
5636647567753216-fe1.pantheonsite.io
hdil.human.cornell.edu
nartc.fcm.arizona.edu
sf-lib-lms-018.serverfarm.cornell.edu
legacy.ece.cornell.edu
verne.soc.cornell.edu
blog.johnson.cornell.edu
5730774057746432-fe4.pantheonsite.io
5654672874405888-fe3.pantheonsite.io
avedon.med.cornell.edu
calendar.sdzsafaripark.org
5763210187636736-fe2.pantheonsite.io
engineering.cornell.edu
s001.med.cornell.edu
puppet.coecis.cornell.edu
sullivan.cce.cornell.edu
coffeabase.org
5707324073181184-fe2.pantheonsite.io
5700866052980736-fe2.pantheonsite.io
bearinmind.eclipsco.org
gunalert02.ornith.cornell.edu
3fadmin.govdelivery.com
d2.shared.global.fastly.net
tier.dyson.cornell.edu
newfit.cit.cornell.edu
5658962204557312-fe4.pantheonsite.io
5736907271045120-fe1.pantheonsite.io
library.cornell.edu
pryde.bctr.cornell.edu
lassp.cornell.edu
newsletter.research.cornell.edu
5686536431468544-fe1.pantheonsite.io
streetfilms.org
5763210187636736-fe2.pantheonsite.io
5659822271758336-fe3.pantheonsite.io
5654961308303360-fe2.pantheonsite.io
charon.ece.cornell.edu
www.cmm.cornell.edu
delib-cal.qatar-weill.cornell.edu
urmc.cs.cornell.edu
calscomlabs-multi-ssl.cit.cornell.edu
webeditor.dyson.cornell.edu
5769623379116032-fe2.pantheonsite.io
dns-vetting1g.map.fastly.net
5736907271045120-fe1.pantheonsite.io
5740240702537728-fe2.pantheonsite.io
hotelie.sha.cornell.edu
courses1.cit.cornell.edu
5637369860456448-fe1.pantheonsite.io
www.systems.cs.cornell.edu
forms-dev.serverfarm.cornell.edu

Certificate

The complete raw certificate details for advertising.gsm.cornell.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSnemv0wZzcXAgMkBQX
ztwjNHFrHpIs5axrzzrdlw7T+GZAQLPiUvSZmF3ScRQ1Ni77M7wvvj8WKgEm6kmk
IGsqEr1NwVO/9M+bfL4ePy1ywV87Wx7ZOVVK4JWJMqctOtWZynJz3jX67Nda0+9B
++4/N4TAaLpUnxu83mMaTL+l/8yYin0iItxxZ3YRMvL8oMO9BWqFighCSszfIpRu
fGHjpEeodJZe7aLi7DcePvwyXZWi/al1YQeCdFkrpkcgk8myhP/APzQjk3bdKAlw
KQDdvQR4Y3b+bMJVibDWVrVqjLz+ybpaAJiOjKOmp9NDC6LZPJujVsE+mvYR8y2Z
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281347769667775290841994971386626161184091
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 04:06:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 04:06:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'advertising.gsm.cornell.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295278889261962340330570593076765092564594026629510040566849443941721212705222905469227342749655760761925628146467776896918161669177237506061638055976839317974540229085566909601290432792766688540743857041618507082302908209321494362376641574366690514136936988276436757394515726000349835912320682069511736058985263380188984941851626522348036976567257123937402752130277851931257557691396509910741392947845349707974538616547869499133806197294376341097227039876415788275764051935080580783290065738507278734728703160147978353048962982659390140744073959855669537306275821116832669307766091573181749448001568724078979553621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9afd9c5c2527f73da763fa006a0c82e19841d49a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1723 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertising.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agen-togel.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandar-togel-terpercaya.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beamhit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bola-setan.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'criminalminds-dev.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'criminalminds-test.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'criminalminds.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daftar-bandar-togel.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danatogel.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-portal.fastshop.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhis2symposium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dominoqq.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edukasi.m.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsa-dev.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hokibos.test.webservices.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonescompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.fourwindsinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.advertising.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.structures.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcleodinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midwesthomeenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.coraldds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nujuvena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerships.advanced.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinc-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppd-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiology.virginia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safersex4seniors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'script.m.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceaide.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situs-bandar-togel.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situs-slot.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situs-togel-online.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situs-togel-terpercaya.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situs-togel.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situstogelhadiah.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situstogelonline.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skelmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-jepang.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-mahjong.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smokingrillin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.foresiteelectric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steve.ps-pantheon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texaslawhelp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevictoryapts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togel-hari-ini.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usbioplastics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usw8-597.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivasvisual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrirossprize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acc.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allstarexteriorsllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americansforhealthsafety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gracedome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hub.meed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meritemploy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycalstrs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obecorp.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obrasespecialeschile.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savemyira.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thejulliardstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togel.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwchi.ezesoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yvonnespicerformayor.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yvonnespicerformayor.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b3c079fd9000004030047304502201d451750c21a55366fb14cf79b8922e82ba7318c2566eafa5da88ec422772042022100f94b634517e2124210cb741f434dcb0fea8fa320266ead0b911b12836d008503007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b3c07a007000004030048304602210083b9bf43b278496c73b58a9d0ea27f730ad89bc6113db3cd73940b40a690c0ac022100f95ab4f51ee47df4d603c9062fa2fcfed114be7fac14f60c1e62106fb7e2da60
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007a37befef81f30423d7e56359de264331523598267a124cce8ce2beca2672df17ea06bdde713b914675a2a8561ad2c0d6dd1ed0f7b2742142538d569dd2b6deb3cbf0075bc709762c1b08f47e24df5dd609e63f5ea1984e324b87d9128ab574bb2d362d0c82852b9e7ff41a31f6d6545b49b53d3c5526f12cd63f655bbc07299b116df31860ba0e8a01e715367448dbf2233d08f4e6e0956241a5b81a5cb0d238d300d1c2b0917b147b0ffa5c308c73a2ae7f84d9c6d817cb23d4ad2a977cb0e34728f2730a39c746e10749fe137ab093060fab3bf035d2ad38ae107aba69314c93f4e9965b20ee30e0ebbf72edafafb2239fb8c62e328919023ff442f888410