aleph.mnpals.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:42:52:22:29:c1:f0:3b:65:58:e2:e6:e7:8d:bd:77:34:24 was issued on by Let's Encrypt.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aleph.mnpals.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:52:22:29:c1:f0:3b:65:58:e2:e6:e7:8d:bd:77:34:24
Serial Number (int): 283904668092754409136722567689333187752996
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8f:c7:64:71:d3:a6:5a:84:6f:1c:f2:40:b4:ad:a6:41:cb:03:61:1a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:33:52:27:7e:50:64:47:62:a6:c4:bb:00:a9:e1:03:57:e1:23:cd
Fingerprint (sha256): 13:20:5e:ed:5f:b8:14:07:84:98:0f:4c:af:38:f8:70:c2:c7:e7:53:bb:95:bf:14:c0:3a:11:64:6b:02:7e:03

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aleph.mnpals.net

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aleph.mnpals.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aleph.mnpals.net
blc.mnpals.net
bsu.mnpals.net
cen.mnpals.net
dctc.mnpals.net
deed.mnpals.net
dnr.mnpals.net
dunwoody.mnpals.net
hibbing.mnpals.net
ill.mnpals.net
lltc.mnpals.net
lrl.mnpals.net
lsc.mnpals.net
mag.mnpals.net
mdh.mnpals.net
mdr.mnpals.net
mdt.mnpals.net
mesabi.mnpals.net
minneapolis.mnpals.net
mnhs.mnpals.net
mnpals.alextech.edu
mnpals.anokaramsey.edu
mnpals.anokatech.edu
mnpals.clcmn.edu
mnpals.cord.edu
mnpals.csbsju.edu
mnpals.css.edu
mnpals.fdltcc.edu
mnpals.gac.edu
mnpals.gustavus.edu
mnpals.hennepintech.edu
mnpals.inverhills.edu
mnpals.itascacc.edu
mnpals.mcad.edu
mnpals.metrostate.edu
mnpals.mnstate.edu
mnpals.mnsu.edu
mnpals.mnwest.edu
mnpals.nhcc.edu
mnpals.normandale.edu
mnpals.ntcmn.edu
mnpals.pcae.k12.mn.us
mnpals.ridgewater.edu
mnpals.roch.edu
mnpals.smsu.edu
mnpals.smumn.edu
mnpals.southeastmn.edu
mnpals.stcloudstate.edu
mnpals.vcc.edu
mnpals.winona.edu
msctc.mnpals.net
msll.mnpals.net
nctc.mnpals.net
pca.mnpals.net
prod22tables.mnpals.net
ptc.mnpals.net
riverland.mnpals.net
rrcc.mnpals.net
rushcity.mnpals.net
saintpaul.mnpals.net
sctc.mnpals.net
southcentral.mnpals.net
tables.prod22.mnpals.net
workforchocolate.mnpals.net
www.mnpals.net

Other certificates including the domain name mnpals.net

(limited to 100 certificates)
*.clcproxy.mnpals.net
*.lscproxy.mnpals.net
*.ihcproxy.mnpals.net
*.fdlproxy.mnpals.net
*.trmproxy.mnpals.net
*.tstproxy.mnpals.net
*.cenproxy.mnpals.net
*.sccproxy.mnpals.net
*.nwtproxy.mnpals.net
*.mctproxy.mnpals.net
*.sccproxy.mnpals.net
*.ahtproxy.mnpals.net
islandora.mnpals.net
*.ahtproxy.mnpals.net
*.ndcproxy.mnpals.net
staging-wrl.mnpals.net
*.iccproxy.mnpals.net
ecrl.mnpals.net
*.ahtproxy.mnpals.net
*.mctproxy.mnpals.net
*.accarcproxy.mnpals.net
*.mtrproxy.mnpals.net
*.mctproxy.mnpals.net
ojs.mnpals.net
*.nhcproxy.mnpals.net
*.cordproxy.mnpals.net
*.sptproxy.mnpals.net
*.cenproxy.mnpals.net
*.ptcproxy.mnpals.net
*.ndcproxy.mnpals.net
*.mctproxy.mnpals.net
*.sctproxy.mnpals.net
*.ptcproxy.mnpals.net
*.wsuproxy.mnpals.net
*.nctproxy.mnpals.net
*.sptproxy.mnpals.net
*.mecproxy.mnpals.net
tables.dev21.mnpals.net
*.ssuproxy.mnpals.net
*.accarcproxy.mnpals.net
*.rclwproxy.mnpals.net
*.rrcproxy.mnpals.net
*.sccproxy.mnpals.net
islandorad.mnpals.net
*.hccproxy.mnpals.net
*.htcproxy.mnpals.net
*.nwtproxy.mnpals.net
*.dctproxy.mnpals.net
*.clcproxy.mnpals.net
*.nwtproxy.mnpals.net
*.mplus2d.mnpals.net
analytics.mnpals.net
*.cordproxy.mnpals.net
*.ihcproxy.mnpals.net
aleph.mnpals.net
*.ndcproxy.mnpals.net
*.nwtproxy.mnpals.net
*.htcproxy.mnpals.net
*.mctproxy.mnpals.net
*.ucrproxy.mnpals.net
*.mecproxy.mnpals.net
*.wsuproxy.mnpals.net
wrl.mnpals.net
*.cordproxy.mnpals.net
*.bsuproxy.mnpals.net
wrl.mnpals.net
*.trmproxy.mnpals.net
*.ihcproxy.mnpals.net
cufts.mnpals.net
carleton.mnpals.net
analytics.mnpals.net
*.cenproxy.mnpals.net
*.rvlproxy.mnpals.net
*.ssuproxy.mnpals.net
islandora.mnpals.net
*.mctproxy.mnpals.net
*.ctcproxy.mnpals.net
*.ihcproxy.mnpals.net
*.trmproxy.mnpals.net
*.ndcproxy.mnpals.net
*.ihcproxy.mnpals.net
*.nctproxy.mnpals.net
islandorad.mnpals.net
mplusd.mnpals.net
mplusd.mnpals.net
*.acccbrproxy.mnpals.net
*.vccproxy.mnpals.net
booking.mnpals.net
islandora.mnpals.net
*.accarcproxy.mnpals.net
islandora.mnpals.net
*.ptcproxy.mnpals.net
*.acccbrproxy.mnpals.net
*.nhcproxy.mnpals.net
*.trmproxy.mnpals.net
cufts.mnpals.net
lendingslip.mnpals.net
analytics.mnpals.net
*.mtrproxy.mnpals.net
*.fdlproxy.mnpals.net

Certificate

The complete raw certificate details for aleph.mnpals.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy39JD/Tl0klvEJIO2/w
il2aqVpzQb/kQ580J0/shh23hG7/vi1Y3cJ1+NETg8a3ahRl83N7qLGzlRBwdDef
JbektgudmiwbcEqA/D8rn5k2TGyzctuoE6fdd5pkCHZZuDdctUNppzWULbHTV6O9
qHoi8nN+J/un32zzgPXyWaDE5yJRDWILDdwMBpYrKgjXbbH4/grl8aBoJTFbIUod
4JXmHzYIEvoRrNKYcaB1UUWK+pyXfewcnUBR/qTl4fBzKl7JAtrRpg7Xbl+yLQol
w3Jw2FVvO/AlDRIyU3+pi1QPVOgct7JuwJmZT1ELqZ3rs23LnJNuthg297HU/gQv
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283904668092754409136722567689333187752996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-30 18:16:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-28 18:16:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aleph.mnpals.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21104474868778391600314754678580756620041645183195069767693044547036506972237808899661569019988659423973115509312833282772151083483120608436129414682964468854923803454239061324282843366688947403375841676558259307845430432097362280513568735121081204553093394947940788306823773771682183062015813864409037131853068475266161849660724193112028774444755307874082444782121028613340143297130969171047224310415360251016077136292736786025108238985303038820141650772545538293940611453635647670591068219304728406040761171470556996404102902665948111856407323429531651596915040766044572421647550500906128776172120281863630107193149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8fc76471d3a65a846f1cf240b4ada641cb03611a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1252 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aleph.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blc.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsu.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cen.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dctc.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deed.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnr.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunwoody.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hibbing.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ill.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lltc.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrl.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsc.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mag.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdh.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdr.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdt.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesabi.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minneapolis.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnhs.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.alextech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.anokaramsey.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.anokatech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.clcmn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.cord.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.csbsju.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.css.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.fdltcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.gac.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.gustavus.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.hennepintech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.inverhills.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.itascacc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.mcad.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.metrostate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.mnstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.mnsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.mnwest.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.nhcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.normandale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.ntcmn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.pcae.k12.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.ridgewater.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.roch.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.smsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.smumn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.southeastmn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.stcloudstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.vcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnpals.winona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msctc.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msll.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nctc.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pca.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod22tables.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptc.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverland.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrcc.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rushcity.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintpaul.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sctc.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcentral.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tables.prod22.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workforchocolate.mnpals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mnpals.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000166c6680602000004030046304402204fe1cbd52fecfd574902c789499d8cef727442db90546ea75d7c65ec96e56c2f02207b827204f6d9e9ac737a1d7aa3f977aadd191f0123dbf451b5488f036b2d5902007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166c66807630000040300463044022070ff26b8075d9dee2b9462d8ce7ba9086248bd8a0553070c2195d68977dc3bbb0220136258a78d895642b255fb518b00f250f313a0d2e6882ea4a12202e62cce975a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0007f744ea1c718e406b39049c203b579b27c699fa11571bda721e1c47252383656939004afaf79ab512cc2d1bed5c7c450a3c635321f17dcfb7438b70c612a051d5151a7879a4e5df1de869e7bf9c5b01af05deb64677fcdaf06fbfd9c17cadd2d1737fe3e9a27194181ba710c75527aef441eb4c44348fc2330575af190b5dc00dc7164a4fdfbf7de87062881832e0fd3aa8e4c520394320e549a6d44e06a79801f0ed3f1d0a177d081bc0e08a267dee51fc2525e628730e4f1545c9ab22c8cb139d8b3f2add91bbb4439ce78869efee108633b6ff3b501270dbe45b7f84383d63322001957b73018f27a93b57baaa96e3373275ec85bac254dccb7ac236a126