asikmpo.discoverlosangeles.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f3:da:bf:69:a9:17:52:42:6f:19:c2:a4:de:50:17:2b:81 was issued on by Let's Encrypt.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=asikmpo.discoverlosangeles.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f3:da:bf:69:a9:17:52:42:6f:19:c2:a4:de:50:17:2b:81
Serial Number (int): 431428524463659910469670506472783136369537
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9a:fd:9c:5c:25:27:f7:3d:a7:63:fa:00:6a:0c:82:e1:98:41:d4:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e0:90:a3:2d:96:b7:ad:5d:3f:d7:3b:9a:c6:ae:db:9b:ad:ad:80:0b
Fingerprint (sha256): 12:07:b4:d5:d3:6f:8b:c9:dc:39:36:e5:59:8f:0d:55:7d:1d:ec:ab:19:46:73:4e:8e:59:bd:02:74:f8:2a:4e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate asikmpo.discoverlosangeles.com

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for asikmpo.discoverlosangeles.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

asikmpo.discoverlosangeles.com
bambu.test.ufc.com
behavioral-health.alvernia.edu
bo-togel.govdelivery.com
bo.jhpiego.org
bonus.test.ufc.com
cn.dev.ufc.com
collab-edge.govdelivery.com
communityadvancementfirm.com
daemetermaps.org
dev-brandexperience.smh.com.au
dev.wthr.com
euid.ufcespanol.com
euro.ufcespanol.com
ftp.med.fsu.edu
gas-rank1.gsm.cornell.edu
havana.test.ufc.com
help.as-coa.org
help.catholicreview.org
hoki.gsm.cornell.edu
id.ufcespanol.com
judislot.gsm.cornell.edu
kiara.dev.oceana.org
kiara.gsm.cornell.edu
kochen.test.ufc.com
kr.dana.org
kunci.gsm.cornell.edu
laxustest.gsm.cornell.edu
live-leg-cyber.edu.help
lotus2.jsums.edu
mail.merittrac.com
mbi.commerce.virginia.edu
new.habitatmichigan.org
npdmusicwatch.npd.com
pastinaik.gsm.cornell.edu
pay4d.govdelivery.com
pragmatic.ufcespanol.com
press.npd.com
sdsdssd.gsm.cornell.edu
sel.humboldt.edu
shopflickrocket.nacha.org
siggraph2015.discoverlosangeles.com
signup.sciencelogic.com
sites.gsm.cornell.edu
slot-bonanza.test.webservices.umich.edu
sloth.gsm.cornell.edu
star.gsm.cornell.edu
stjh.co.uk
sun.gsm.cornell.edu
techtransfer.arizona.edu
tektronix.hbdesign.com
togel-toto.gsm.cornell.edu
togel.courtinnovation.org
togelonline-toto.gsm.cornell.edu
uanv.arizona.edu
www.geosci.sfsu.edu
www.google.gsm.cornell.edu
www.hls.harvard.edu
www.hoki.gsm.cornell.edu
www.jc.edu
www.kines.test.webservices.umich.edu
www.mx.rockhurst.edu
www.surgicalimages.arizona.edu
www.zbane.gsm.cornell.edu

Other certificates including the domain name discoverlosangeles.com

(limited to 100 certificates)
explore.seemore.org
discoverlosangeles.com
5764144745676800-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5705718560718848-fe3.pantheonsite.io
experience.visitsugarlandtx.com
5764144745676800-fe3.pantheonsite.io
5638830484881408-fe3.pantheonsite.io
5667908084563968-fe2.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
media.discoverlosangeles.com
ssl511270.cloudflaressl.com
5764144745676800-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
communityadvancementfirm.com
5705718560718848-fe3.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5705718560718848-fe3.pantheonsite.io
5667908084563968-fe2.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5667908084563968-fe2.pantheonsite.io
5667908084563968-fe2.pantheonsite.io
5705718560718848-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
sni.cloudflaressl.com
5764144745676800-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5638830484881408-fe3.pantheonsite.io
5638830484881408-fe3.pantheonsite.io
asikmpo.discoverlosangeles.com
5667908084563968-fe2.pantheonsite.io
5638830484881408-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5667908084563968-fe2.pantheonsite.io
5667908084563968-fe2.pantheonsite.io
ssl511271.cloudflaressl.com
5764144745676800-fe3.pantheonsite.io
ssl511271.cloudflaressl.com
5638830484881408-fe3.pantheonsite.io
5667908084563968-fe2.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5667908084563968-fe2.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5705718560718848-fe3.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5705718560718848-fe3.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
deanbphilips.com
go.visitlakecharles.org
5764144745676800-fe3.pantheonsite.io
deanbphilips.com
sni.cloudflaressl.com
5764144745676800-fe3.pantheonsite.io
deanbphilips.com
5638830484881408-fe3.pantheonsite.io
5667908084563968-fe2.pantheonsite.io
5667908084563968-fe2.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
ssl511272.cloudflaressl.com
5667908084563968-fe2.pantheonsite.io
5667908084563968-fe2.pantheonsite.io
media.discoverlosangeles.com
5705718560718848-fe3.pantheonsite.io
ssl3919.cloudflare.com
5645056174194688-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
ssl511272.cloudflaressl.com
5645056174194688-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
ssl511270.cloudflaressl.com
5764144745676800-fe3.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
ssl3919.cloudflare.com
5764144745676800-fe3.pantheonsite.io
5667908084563968-fe2.pantheonsite.io
media.discoverlosangeles.com
5764144745676800-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
5764144745676800-fe3.pantheonsite.io
www.exploretucsonattractions.com

Certificate

The complete raw certificate details for asikmpo.discoverlosangeles.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSnemv0wZzcXAgMkBQX
ztwjNHFrHpIs5axrzzrdlw7T+GZAQLPiUvSZmF3ScRQ1Ni77M7wvvj8WKgEm6kmk
IGsqEr1NwVO/9M+bfL4ePy1ywV87Wx7ZOVVK4JWJMqctOtWZynJz3jX67Nda0+9B
++4/N4TAaLpUnxu83mMaTL+l/8yYin0iItxxZ3YRMvL8oMO9BWqFighCSszfIpRu
fGHjpEeodJZe7aLi7DcePvwyXZWi/al1YQeCdFkrpkcgk8myhP/APzQjk3bdKAlw
KQDdvQR4Y3b+bMJVibDWVrVqjLz+ybpaAJiOjKOmp9NDC6LZPJujVsE+mvYR8y2Z
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431428524463659910469670506472783136369537
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 01:37:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 01:37:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'asikmpo.discoverlosangeles.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295278889261962340330570593076765092564594026629510040566849443941721212705222905469227342749655760761925628146467776896918161669177237506061638055976839317974540229085566909601290432792766688540743857041618507082302908209321494362376641574366690514136936988276436757394515726000349835912320682069511736058985263380188984941851626522348036976567257123937402752130277851931257557691396509910741392947845349707974538616547869499133806197294376341097227039876415788275764051935080580783290065738507278734728703160147978353048962982659390140744073959855669537306275821116832669307766091573181749448001568724078979553621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9afd9c5c2527f73da763fa006a0c82e19841d49a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1521 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asikmpo.discoverlosangeles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bambu.test.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'behavioral-health.alvernia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-togel.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo.jhpiego.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonus.test.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.dev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communityadvancementfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daemetermaps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-brandexperience.smh.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wthr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euid.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euro.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.med.fsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gas-rank1.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havana.test.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.catholicreview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoki.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'judislot.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiara.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiara.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kochen.test.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kr.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kunci.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laxustest.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-leg-cyber.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotus2.jsums.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.merittrac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbi.commerce.virginia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.habitatmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npdmusicwatch.npd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pastinaik.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay4d.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pragmatic.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'press.npd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdsdssd.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sel.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopflickrocket.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siggraph2015.discoverlosangeles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.sciencelogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-bonanza.test.webservices.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sloth.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'star.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjh.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sun.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techtransfer.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tektronix.hbdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togel-toto.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togel.courtinnovation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togelonline-toto.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uanv.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geosci.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.google.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hls.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoki.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kines.test.webservices.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mx.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surgicalimages.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zbane.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c8515bf17000004030047304502204f432af29b220439c6f0f0feeb981c73f9fd96eda1f5e9dc094e3d2f21e35146022100bd9ec2b28f29aef0f7d16935432a90f6894583000bf703d072163fd1be9a024d00760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c8515bfdf0000040300473045022100a5c2adf5d39d552bd3fcc3e1c226ee8f7a675b702919aca188878bbcc5493463022005d32a5dc3c6daec603aeb2a48f0717d796712344cc7ebc08d210ec9d9bdae14
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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