scilsresx.rutgers.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:fb:31:65:22:66:1b:b3:a5:9f:a1:e7:e2:93:e5:f0:b1:3e was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=scilsresx.rutgers.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fb:31:65:22:66:1b:b3:a5:9f:a1:e7:e2:93:e5:f0:b1:3e
Serial Number (int): 346813389183904239540275305806976515092798
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2d:41:c6:6a:c2:33:9b:c8:9b:7d:2c:f8:97:df:67:1c:90:2b:7b:f0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 58:ff:2f:d0:22:04:34:d1:78:b2:5d:62:53:80:fe:19:d2:fd:ce:44
Fingerprint (sha256): 11:d3:01:8c:e3:e2:08:7f:26:ff:cc:b7:42:b5:19:e7:e8:af:07:8b:96:16:3b:fc:a5:84:5a:4e:58:aa:26:d6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate scilsresx.rutgers.edu

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for scilsresx.rutgers.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

scilsresx.rutgers.edu
sdgs-staging.scout.org
secure.tu.org
sexgenderlab.human.cornell.edu
slot.pbn-a56.rockhurst.edu
smtp.commonsensemedia.org
social.davidson.edu
sourceu.warnerpacific.edu
stage.onlineeducation.psu.edu
staging-na.altran.com
staging.freedomworks.org
stanfordsummersession.stanford.edu
states.drugpolicy.org
static5.bisparks.org
stfincrease.unlv.edu
store.actorsfund.org
summercollegeacademy.stanford.edu
support.doctorswithoutborders.org
sv3.presidio.edu
swfwmd.state.fl.us
system.religionnews.com
t.wholegrainscouncil.org
tango.franklin.uga.edu
technoculturalstudies.ucdavis.edu
test.aep.cornell.edu
test.cam.cornell.edu
test.cee.cornell.edu
test.cochise.az.gov
test.efc.ny.gov
test.ethics3.pantheon.berkeley.edu
test.makinghistory.gwu.edu
test.mse.cornell.edu
test.ocio.osu.edu
test.radcliffe.edu
testb.test.uis.georgetown.edu
testdomain3.uis.georgetown.edu
the-fourth.cca.edu
tism.msu.edu
tl.wvu.edu
tomacau.gsm.cornell.edu
townofdiscoverybay.ca.gov
townsendlab.berkeley.edu
transitions.metrotech.edu
uat-test.worldvision.org
ucomm-sites-dev.stanford.edu
ui.connorsstate.edu
university.gsm.cornell.edu
unskippable.crs.org
updates.cjei.cornell.edu
updates.cpra.cornell.edu
vaccine.mcny.org
vibrava.rutgers.edu
viewfinder.pamm.org
virtual2.unlv.edu
vpr.arizona.edu
wanprc.washington.edu
web.commerce.virginia.edu
web1.mcny.org
webdev.colorado.edu
webtest.tsu.edu
wp.americancouncils.org
ww.as-coa.org
www-dev.southmountaincc.edu
www.aggiesvote.ucdavis.edu
www.aggievote.ucdavis.edu
www.alumni.dartmouth.edu
www.asla.ced.berkeley.edu
www.astro.berkeley.edu
www.azcc.arizona.edu
www.azmex.arizona.edu
www.belonging.berkeley.edu
www.bff.uga.edu
www.blogs.earthjustice.org
www.cas.msu.edu
www.cie.ucdavis.edu
www.comartsci.msu.edu
www.comdis.msu.edu
www.comm.msu.edu
www.cybersecurity.umass.edu
www.datahero.com
www.dev.netimpact.org
www.diplomacy.state.gov
www.discover-uhr.rutgers.edu
www.earlymodernenglishdrama.folger.edu
www.ee.udel.edu
www.enpsmobile.krtv.com
www.esc.rutgers.edu
www.eventsinfo.presidio.edu
www.executionists.com
www.extension.ucdavis.edu
www.gamma.radiology.arizona.edu
www.gim.utoronto.ca
www.giving.dartmouth.edu
www.hcii.cs.cmu.edu

Other certificates including the domain name rutgers.edu

(limited to 100 certificates)
signalsweb.rutgers.edu
ncs.newark.rutgers.edu
5767253387640832-fe2.pantheonsite.io
test-web-lws.edu.help
5662197925543936-fe2.pantheonsite.io
vawconsortium.rutgers.edu
business.rutgers.edu
5767253387640832-fe2.pantheonsite.io
carpepm.almonds.com
5759522421342208-fe1.pantheonsite.io
5685265389584384-fe2.pantheonsite.io
5732694713434112-fe3.pantheonsite.io
t5-asb-2-sp.ei.rutgers.edu
globalhealth.rutgers.edu
sauron.rutgers.edu
nonviolence.rutgers.edu
admissionservices.rutgers.edu
ucm.rutgers.edu
sk1897.rutgers-sci.domains
brodskycenter.rutgers.edu
english.rutgers.edu
5723088213770240-fe3.pantheonsite.io
it.uahs.arizona.edu
mailoptin.rutgers.edu
my.rutgers.edu
mybook.physics.rutgers.edu
www.nbcs.rutgers.edu
chrs.rutgers.edu
test-rt.ips.rutgers.edu
lammerts.religion.rutgers.edu
test-onbase.rutgers.edu
dev-developer.njdatabook.docs.rutgers.edu
etba.rbhs.rutgers.edu
transcripts.rutgers.edu
ucdc.edu
test-hdrti.rutgers.edu
5731283548241920-fe4.pantheonsite.io
data.rutgers.edu
5202656289095680-fe4.pantheonsite.io
nj-vegetable-crops-online-resources.rutgers.edu
5636647567753216-fe1.pantheonsite.io
rackstation.falabs.rutgers.edu
nartc.fcm.arizona.edu
5753050442498048-fe1.pantheonsite.io
5685057352105984-fe4.pantheonsite.io
5732694713434112-fe3.pantheonsite.io
calendar.sdzsafaripark.org
policy.rutgers.edu
5649521866440704-fe3.pantheonsite.io
5723088213770240-fe3.pantheonsite.io
orad.rutgers.edu
tag.rutgers.edu
5743114304094208-fe3.pantheonsite.io
aim1.ufcp.rutgers.edu
events.newark.rutgers.edu
apps.physics.rutgers.edu
aspoerri.rutgers-sci.domains
webprod.cs.rutgers.edu
5178081291534336-fe1.pantheonsite.io
qa-helpdesk.docs.rutgers.edu
bigideas.rutgers.edu
sourendev.scilsnet.rutgers.edu
5755812509122560-fe2.pantheonsite.io
hsgpawsvr.hars.rutgers.edu
software.rutgers.edu
exhibitkit.rutgers.edu
5672749318012928-fe3.pantheonsite.io
exchange.nwk-campus.rutgers.edu
uconnectlabs.com
5639955095224320-fe3.pantheonsite.io
nagios.rutgers.edu
sasip.rutgers.edu
5759522421342208-fe1.pantheonsite.io
operations-web-dev.ssw.rutgers.edu
banking-business-review.com
idts.comminfo.rutgers.edu
cdn-test.battlefields.org
reu.physics.rutgers.edu
test.eis.uw.edu
5753113524830208-fe1.pantheonsite.io
helpdesk.gse.rutgers.edu
5700019675987968-fe2.pantheonsite.io
5662197925543936-fe2.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5163657986048000-fe4.pantheonsite.io
citeak.multidevcom.uaf.edu
www.design-engineering.princeton.edu
5753050442498048-fe1.pantheonsite.io
taws-upgrade-web.ssw.rutgers.edu
5644309118320640-fe3.pantheonsite.io
5644309118320640-fe3.pantheonsite.io
achieve.escoffier.edu
5644309118320640-fe3.pantheonsite.io
gradschoolalumni.rutgers.edu
aspoerri.rutgers-sci.domains
5649521866440704-fe3.pantheonsite.io
5646535253557248-fe3.pantheonsite.io
benedick.rutgers.edu
operations.rutgers.edu
www.hikeforlifetexas.org

Certificate

The complete raw certificate details for scilsresx.rutgers.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JN61R0OEToyc9CIab1N
fFPve9HGDGrKGYI2xIZDj1g0/YpVvHizoPQmjkhcgffw0DLtIcdqKmZwWURQkKdA
P22GGARM8LLaHTGj2/AzuU5CZGNEMPcva3YNWgQk9hY+0unXuv/T4vdgT/3FbwuH
7XVLuu4g+czlbMzruU+Yy54s1vyp1W4/NraAq8T9qVUYBLtp1Uvzw2vJ4MQIXdae
NRvgRqXWpRHggyeaD/2DrO1wXAB4YY+sTuLY/Exugh8G057soGHwiQNa6myP6enc
wLAmWU0lp3ebW91iAj5jD5qhwJCSp6xNbr10ujDrq/YKK0BUm9dFH31bmQB68DQk
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346813389183904239540275305806976515092798
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-01 00:49:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 00:49:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'scilsresx.rutgers.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30874871418674330599856582475032938667375268619443001630863980336265595132255055319191643458111097912849518683644418268103987213994455977559607858848119842980533392049063729003920357542074988987461137585846020662431659934377838370289619002655875385799518291331039036698807426681817568646147255938646103126008097680224992782780625624378043298116774876838353123724342507002380006971784078794529182989372683470709944523843444459913842097363110245276310289984800758291731507727636966622104526315616493280025870076217545288249244971934789372294783507838417764757756356243493322858302549568740438214483485562672125977044153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d41c66ac2339bc89b7d2cf897df671c902b7bf0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2270 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scilsresx.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdgs-staging.scout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexgenderlab.human.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot.pbn-a56.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.commonsensemedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.davidson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourceu.warnerpacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-na.altran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.freedomworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanfordsummersession.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'states.drugpolicy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static5.bisparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfincrease.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summercollegeacademy.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv3.presidio.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swfwmd.state.fl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'system.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.wholegrainscouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tango.franklin.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technoculturalstudies.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cee.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cochise.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.efc.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ethics3.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ocio.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.radcliffe.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testb.test.uis.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testdomain3.uis.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-fourth.cca.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tism.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tl.wvu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomacau.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townofdiscoverybay.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townsendlab.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transitions.metrotech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-test.worldvision.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucomm-sites-dev.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ui.connorsstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'university.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unskippable.crs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.cjei.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.cpra.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccine.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vibrava.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewfinder.pamm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtual2.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpr.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanprc.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.commerce.virginia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web1.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdev.colorado.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtest.tsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.southmountaincc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aggiesvote.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aggievote.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.dartmouth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asla.ced.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astro.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azcc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azmex.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belonging.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bff.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blogs.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cas.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cie.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comartsci.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comdis.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comm.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cybersecurity.umass.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datahero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.netimpact.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diplomacy.state.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discover-uhr.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earlymodernenglishdrama.folger.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ee.udel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enpsmobile.krtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esc.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eventsinfo.presidio.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.executionists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamma.radiology.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gim.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giving.dartmouth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcii.cs.cmu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006d165f44a89032cf4b2dfceca750ac567353cc101af461e677e8f2755b0cedf278a65be38a473546738dc4ea8a1b5ecb551a6ea9e6be2687b619e44be0e675ef64bc6032b8a394c3197fd91ed61f4c160f4f0077c0ac42176e7aa53a8d7d6aa25d68b504f87678f9e809de82b80fe7a07f943fc55e7c37715355941a4da309210d65069871158f652135e6a501346c97a030915c22145fd5e85f0a1263b08bcfa285e99ba23bb966820c484f4f85f572b328625361880ea48a8fcbc170bddfbb4509118625c33f3954bba0d19f202c91e3b66f4fc4c2d7bbd2bcfb0463e425d6385adb976112d185cd7a5c0c64a32279010afdb7bd4e152b5457e43c0c7b1e8a