sdgs-staging.scout.org

Issued by R3

About this certificate

This digital certificate with serial number 03:94:8b:77:23:01:be:84:37:c3:e1:76:87:de:2c:2e:e5:be was issued on by Let's Encrypt.

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sdgs-staging.scout.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:94:8b:77:23:01:be:84:37:c3:e1:76:87:de:2c:2e:e5:be
Serial Number (int): 311884029384342427767013056562095864079806
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 59:1c:0b:15:bf:7c:6e:e7:3f:b4:1e:be:b6:1e:0e:95:3a:5b:d1:07
Fingerprint (sha256): 12:c9:6a:9b:71:89:4c:41:63:9e:90:23:a6:13:08:ff:83:13:99:be:f0:33:6f:80:c0:10:d4:69:4f:d0:dc:60

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sdgs-staging.scout.org

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sdgs-staging.scout.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sdgs-staging.scout.org
smagent.ctd.northwestern.edu
stanfordsummersession.stanford.edu
swfwmd.state.fl.us
test.cochise.az.gov
test.ethics3.pantheon.berkeley.edu
townsendlab.berkeley.edu
transitions.metrotech.edu
tst.dhsri.yale.edu
wanprc.washington.edu
webdev.colorado.edu
website.wells.edu
webtest.tsu.edu
winter.arizona.edu
wireless.unlv.edu
www.asla.ced.berkeley.edu
www.azspo.az.gov
www.beta-engineering.princeton.edu
www.crwr.utexas.edu
www.cybersecurity.umass.edu
www.diplomacy.state.gov
www.eci.ucsb.edu
www.ein.az.gov
www.extension.ucdavis.edu
www.facultyprograms.arizona.edu
www.financialaid.arizona.edu
www.hcii.cs.cmu.edu
www.ihe.uga.edu
www.international.arizona.edu
www.internationaladmissions.arizona.edu
www.issr.asu.edu
www.jhpiego.jhu.edu
www.marketing.arizona.edu
www.molecularbiosci.utexas.edu
www.museconnect.arizona.edu
www.odee-pgmo.osu.edu
www.ol.rutgers.edu
www.onlinecso.dshs.wa.gov
www.randybryceforcongress.com
www.sph.berkeley.edu
www.studentmedia.arizona.edu
www.studyabroad.arizona.edu
x17my.ctd.northwestern.edu
yqss.kjzz.org

Other certificates including the domain name scout.org

(limited to 100 certificates)
5703821594460160-fe3.pantheonsite.io
5732694713434112-fe3.pantheonsite.io
5672749318012928-fe3.pantheonsite.io
www.scout.org
scoutconference.gbj.dfo.mybluehost.me
5703821594460160-fe3.pantheonsite.io
research-pp.stonybrook.edu
5709068098338816-fe3.pantheonsite.io
5732694713434112-fe3.pantheonsite.io
people.ohrengineering.com
161511-web1.vilcek.org
live.ucdavis.edu
5672749318012928-fe3.pantheonsite.io
expense.geoinstinct.com
liberalarts.ss.pacific.edu
expense.geoinstinct.com
expeditions.sandiegozoo.org
5703821594460160-fe3.pantheonsite.io
5732694713434112-fe3.pantheonsite.io
accredible.armanl.eu
m.ajc.org
5703821594460160-fe3.pantheonsite.io
donate.scout.org
expense.geoinstinct.com
5672749318012928-fe3.pantheonsite.io
5729327995944960-fe3.pantheonsite.io
live.bme.cornell.edu
labellelab.asu.edu
hr.gep.com
5703821594460160-fe3.pantheonsite.io
5672749318012928-fe3.pantheonsite.io
5709068098338816-fe3.pantheonsite.io
acquia-sites.com
5703821594460160-fe3.pantheonsite.io
5729327995944960-fe3.pantheonsite.io
live.ophd.pantheon.berkeley.edu
5732694713434112-fe3.pantheonsite.io
acquia-sites.com
5703821594460160-fe3.pantheonsite.io
161511-web1.vilcek.org
161511-web1.vilcek.org
scilsresx.rutgers.edu
161511-web1.vilcek.org
expense.cs.zohohost.com
5672749318012928-fe3.pantheonsite.io
sdgs-staging.scout.org
international.dev.oceana.org
5709068098338816-fe3.pantheonsite.io
5703821594460160-fe3.pantheonsite.io
5703821594460160-fe3.pantheonsite.io
161511-web1.vilcek.org
team.digitalflow.com.np
junk.dana.org
acquia-sites.com
5672749318012928-fe3.pantheonsite.io
afscme57.org
5703821594460160-fe3.pantheonsite.io
5732694713434112-fe3.pantheonsite.io
161511-web1.vilcek.org
alldata.com
acquia-sites.com
scout.org
banking-business-review.com
5732694713434112-fe3.pantheonsite.io
5732694713434112-fe3.pantheonsite.io
liberalarts.ss.pacific.edu
live.ucdavis.edu
lp.programs.carey.jhu.edu.help
5703821594460160-fe3.pantheonsite.io
5703821594460160-fe3.pantheonsite.io
alldata.com
5703821594460160-fe3.pantheonsite.io
5703821594460160-fe3.pantheonsite.io
5703821594460160-fe3.pantheonsite.io
accredible.armanl.eu
5672749318012928-fe3.pantheonsite.io
banking-business-review.com
asla.ced.berkeley.edu
5672749318012928-fe3.pantheonsite.io
lp.grad.online.udel.edu.help
161511-web1.vilcek.org
5703821594460160-fe3.pantheonsite.io
laborlabsandbox.aflcio.org
industri40.ida.dk
alldata.com
people.dxfactor.com
info-dev.calperformances.org
5672749318012928-fe3.pantheonsite.io
5709068098338816-fe3.pantheonsite.io
scout.org
rstinstrumentsinfo.rstinstruments.com
5672749318012928-fe3.pantheonsite.io
5732694713434112-fe3.pantheonsite.io
eduhup.com
junk.dana.org
alldata.com
caexpenses.c53.io
5703821594460160-fe3.pantheonsite.io
5703821594460160-fe3.pantheonsite.io
161511-web1.vilcek.org

Certificate

The complete raw certificate details for sdgs-staging.scout.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311884029384342427767013056562095864079806
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-11 11:58:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 11:58:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sdgs-staging.scout.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdgs-staging.scout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smagent.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanfordsummersession.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swfwmd.state.fl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cochise.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ethics3.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townsendlab.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transitions.metrotech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.dhsri.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanprc.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdev.colorado.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'website.wells.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtest.tsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winter.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wireless.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asla.ced.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azspo.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beta-engineering.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crwr.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cybersecurity.umass.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diplomacy.state.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eci.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ein.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facultyprograms.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financialaid.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcii.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihe.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.international.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internationaladmissions.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.issr.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhpiego.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketing.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.molecularbiosci.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.museconnect.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odee-pgmo.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ol.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinecso.dshs.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.randybryceforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sph.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studentmedia.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studyabroad.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x17my.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yqss.kjzz.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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