clubmanager.me
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a6:22:c3:22:b4:98:aa:61:b1:4d:fb:b7:99:70:45:30:63 was issued on by Let's Encrypt.
With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=clubmanager.me
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a6:22:c3:22:b4:98:aa:61:b1:4d:fb:b7:99:70:45:30:63Serial Number (int): 317869937657810869782804972172787453341795
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b2:e1:5d:a6:da:66:7a:e8:05:c4:c9:be:5c:55:da:b8:11:bc:42:57
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 26:c5:1c:1a:c2:91:79:32:2f:99:bd:35:63:4d:13:b9:a2:98:fa:a5
Fingerprint (sha256): 16:17:dd:b8:fe:bc:88:45:3c:5e:00:69:89:b0:e7:f4:d0:25:34:a9:39:c6:fb:50:4a:d7:56:c9:8e:8b:41:6c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate clubmanager.me
59
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for clubmanager.me
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
afterguard.clubmanager.me
app.tisailing.org
bowtostern.clubmanager.me
castleharbor.clubmanager.me
clients-pinfirelabs.clubmanager.me
clients-pinfirestudios.clubmanager.me
clients.pinfirelabs.com
clients.pinfirestudios.com
clover.clubmanager.me
clubmanager.me
demo.clubmanager.me
events.hooferouting.org
events.hooferscuba.org
events.hooferscubaclub.org
events.hoofersns.org
hoofers.clubmanager.me
lessons.hooferriding.org
lessons.hoofersailing.org
members.hoofermountaineering.org
members.hoofers.org
members.pi.theshop.build
members.sf.theshop.build
members.sj.theshop.build
members.theshop.build
nbss.clubmanager.me
npsc.clubmanager.me
ocsc-sandbox.clubmanager.me
ocsc.clubmanager.me
outdoor-uw.clubmanager.me
pi.theshop.clubmanager.me
pssi.clubmanager.me
register.bowtosternboating.com
register.tacomajrsail.org
registration.hooferyouth.org
registration.sailcalhoun.org
registration.sailmpls.org
reservations.pugetsoundsailing.com
reserve.sbsail.com
reserve.texassailing.com
rochesteryc.clubmanager.me
sailcalhoun.clubmanager.me
sailmpls.clubmanager.me
sailsi.clubmanager.me
sandbox-l.clubmanager.me
sandbox-s.clubmanager.me
sbsail.clubmanager.me
seasafaris.clubmanager.me
secure.hoofers.org
sf.theshop.clubmanager.me
sj.theshop.clubmanager.me
spyc.clubmanager.me
ssc.clubmanager.me
texas-sailing.clubmanager.me
theshop.clubmanager.me
tisc.clubmanager.me
tsa.clubmanager.me
tyc-youth.clubmanager.me
wisconsin-basecamp.clubmanager.me
yachtxp.clubmanager.me
app.tisailing.org
bowtostern.clubmanager.me
castleharbor.clubmanager.me
clients-pinfirelabs.clubmanager.me
clients-pinfirestudios.clubmanager.me
clients.pinfirelabs.com
clients.pinfirestudios.com
clover.clubmanager.me
clubmanager.me
demo.clubmanager.me
events.hooferouting.org
events.hooferscuba.org
events.hooferscubaclub.org
events.hoofersns.org
hoofers.clubmanager.me
lessons.hooferriding.org
lessons.hoofersailing.org
members.hoofermountaineering.org
members.hoofers.org
members.pi.theshop.build
members.sf.theshop.build
members.sj.theshop.build
members.theshop.build
nbss.clubmanager.me
npsc.clubmanager.me
ocsc-sandbox.clubmanager.me
ocsc.clubmanager.me
outdoor-uw.clubmanager.me
pi.theshop.clubmanager.me
pssi.clubmanager.me
register.bowtosternboating.com
register.tacomajrsail.org
registration.hooferyouth.org
registration.sailcalhoun.org
registration.sailmpls.org
reservations.pugetsoundsailing.com
reserve.sbsail.com
reserve.texassailing.com
rochesteryc.clubmanager.me
sailcalhoun.clubmanager.me
sailmpls.clubmanager.me
sailsi.clubmanager.me
sandbox-l.clubmanager.me
sandbox-s.clubmanager.me
sbsail.clubmanager.me
seasafaris.clubmanager.me
secure.hoofers.org
sf.theshop.clubmanager.me
sj.theshop.clubmanager.me
spyc.clubmanager.me
ssc.clubmanager.me
texas-sailing.clubmanager.me
theshop.clubmanager.me
tisc.clubmanager.me
tsa.clubmanager.me
tyc-youth.clubmanager.me
wisconsin-basecamp.clubmanager.me
yachtxp.clubmanager.me
Other certificates including the domain name clubmanager.me
(limited to 100 certificates)
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
www-source.pinfirelabs.com
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
staging.clubmanager.me
clubmanager.me
docs-source.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
clubmanager.me
clover.clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
www-source.pinfirelabs.com
staging.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
*.clubmanager.me
craft-dev.clubmanager.me
clubmanager.me
*.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
updates.clubmanager.me
clubmanager.me
events.hooferouting.org
clover.staging.clubmanager.me
clover.staging.clubmanager.me
clubmanager.me
utils.clubmanager.me
staging.clubmanager.me
*.clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clover.staging.clubmanager.me
clover.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
utils.clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
pinfirelabs.com
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
www-source.pinfirelabs.com
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
staging.clubmanager.me
clubmanager.me
docs-source.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
clubmanager.me
clover.clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
www-source.pinfirelabs.com
staging.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
*.clubmanager.me
craft-dev.clubmanager.me
clubmanager.me
*.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
updates.clubmanager.me
clubmanager.me
events.hooferouting.org
clover.staging.clubmanager.me
clover.staging.clubmanager.me
clubmanager.me
utils.clubmanager.me
staging.clubmanager.me
*.clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clover.staging.clubmanager.me
clover.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
utils.clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
pinfirelabs.com
Certificate
The complete raw certificate details for clubmanager.me in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILOTCCCiGgAwIBAgISA6YiwyK0mKphsU37t5lwRTBjMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMjAwMzM0MTNaFw0x OTA0MjAwMzM0MTNaMBkxFzAVBgNVBAMTDmNsdWJtYW5hZ2VyLm1lMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d4qe+x0iPNd5mo3LoHjKk/fgUNLTpMj rlDeQU0TgiJxFdLUztqHQi8nG6JAjU2rNtIJoFisNNRWFGPY0ddpvXhLY7NqW3QI YKmzV2qX4TPOi62wdruJjcYLPw231WCacOKqt3sGCHEpA2dtNo/dhpfP82OZPTqC kbciwuonVSzhnxUQ6fuzP+AATGfNAOEvMjtJBPZ4y4wif9zO6BdqzEIUedN6CFEp tpBgBgVdM+si/FViM+j1MIkEgx0lDpUdxYGFYBjByXTBe7biTxSv6gHpbVMyRyPa wqrMcoqSaY4zGVOY8MqlKIPu5EOWezkBit3xFf5bkYRIC5qMI22XCQIDAQABo4II SDCCCEQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSy4V2m2mZ66AXEyb5cVdq4EbxC VzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v cmcvMIIF+wYDVR0RBIIF8jCCBe6CGWFmdGVyZ3VhcmQuY2x1Ym1hbmFnZXIubWWC EWFwcC50aXNhaWxpbmcub3Jnghlib3d0b3N0ZXJuLmNsdWJtYW5hZ2VyLm1lghtj YXN0bGVoYXJib3IuY2x1Ym1hbmFnZXIubWWCImNsaWVudHMtcGluZmlyZWxhYnMu Y2x1Ym1hbmFnZXIubWWCJWNsaWVudHMtcGluZmlyZXN0dWRpb3MuY2x1Ym1hbmFn ZXIubWWCF2NsaWVudHMucGluZmlyZWxhYnMuY29tghpjbGllbnRzLnBpbmZpcmVz dHVkaW9zLmNvbYIVY2xvdmVyLmNsdWJtYW5hZ2VyLm1lgg5jbHVibWFuYWdlci5t ZYITZGVtby5jbHVibWFuYWdlci5tZYIXZXZlbnRzLmhvb2Zlcm91dGluZy5vcmeC FmV2ZW50cy5ob29mZXJzY3ViYS5vcmeCGmV2ZW50cy5ob29mZXJzY3ViYWNsdWIu b3JnghRldmVudHMuaG9vZmVyc25zLm9yZ4IWaG9vZmVycy5jbHVibWFuYWdlci5t ZYIYbGVzc29ucy5ob29mZXJyaWRpbmcub3JnghlsZXNzb25zLmhvb2ZlcnNhaWxp bmcub3JngiBtZW1iZXJzLmhvb2Zlcm1vdW50YWluZWVyaW5nLm9yZ4ITbWVtYmVy cy5ob29mZXJzLm9yZ4IYbWVtYmVycy5waS50aGVzaG9wLmJ1aWxkghhtZW1iZXJz LnNmLnRoZXNob3AuYnVpbGSCGG1lbWJlcnMuc2oudGhlc2hvcC5idWlsZIIVbWVt YmVycy50aGVzaG9wLmJ1aWxkghNuYnNzLmNsdWJtYW5hZ2VyLm1lghNucHNjLmNs dWJtYW5hZ2VyLm1lghtvY3NjLXNhbmRib3guY2x1Ym1hbmFnZXIubWWCE29jc2Mu Y2x1Ym1hbmFnZXIubWWCGW91dGRvb3ItdXcuY2x1Ym1hbmFnZXIubWWCGXBpLnRo ZXNob3AuY2x1Ym1hbmFnZXIubWWCE3Bzc2kuY2x1Ym1hbmFnZXIubWWCHnJlZ2lz dGVyLmJvd3Rvc3Rlcm5ib2F0aW5nLmNvbYIZcmVnaXN0ZXIudGFjb21hanJzYWls Lm9yZ4IccmVnaXN0cmF0aW9uLmhvb2ZlcnlvdXRoLm9yZ4IccmVnaXN0cmF0aW9u LnNhaWxjYWxob3VuLm9yZ4IZcmVnaXN0cmF0aW9uLnNhaWxtcGxzLm9yZ4IicmVz ZXJ2YXRpb25zLnB1Z2V0c291bmRzYWlsaW5nLmNvbYIScmVzZXJ2ZS5zYnNhaWwu Y29tghhyZXNlcnZlLnRleGFzc2FpbGluZy5jb22CGnJvY2hlc3RlcnljLmNsdWJt YW5hZ2VyLm1lghpzYWlsY2FsaG91bi5jbHVibWFuYWdlci5tZYIXc2FpbG1wbHMu Y2x1Ym1hbmFnZXIubWWCFXNhaWxzaS5jbHVibWFuYWdlci5tZYIYc2FuZGJveC1s LmNsdWJtYW5hZ2VyLm1lghhzYW5kYm94LXMuY2x1Ym1hbmFnZXIubWWCFXNic2Fp bC5jbHVibWFuYWdlci5tZYIZc2Vhc2FmYXJpcy5jbHVibWFuYWdlci5tZYISc2Vj dXJlLmhvb2ZlcnMub3JnghlzZi50aGVzaG9wLmNsdWJtYW5hZ2VyLm1lghlzai50 aGVzaG9wLmNsdWJtYW5hZ2VyLm1lghNzcHljLmNsdWJtYW5hZ2VyLm1lghJzc2Mu Y2x1Ym1hbmFnZXIubWWCHHRleGFzLXNhaWxpbmcuY2x1Ym1hbmFnZXIubWWCFnRo ZXNob3AuY2x1Ym1hbmFnZXIubWWCE3Rpc2MuY2x1Ym1hbmFnZXIubWWCEnRzYS5j bHVibWFuYWdlci5tZYIYdHljLXlvdXRoLmNsdWJtYW5hZ2VyLm1lgiF3aXNjb25z aW4tYmFzZWNhbXAuY2x1Ym1hbmFnZXIubWWCFnlhY2h0eHAuY2x1Ym1hbmFnZXIu bWUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQC BIH2BIHzAPEAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWhp iZ9ZAAAEAwBHMEUCIQCCLX+yIQIaXsRqv/DLmB0PjLlFkGWDOWgM03Fxan1VFwIg GH4B2VRWXIOg2RqjCGsAMz7L1UrlxByUUgv2QnBlBr0AdwBj8tvN6DvMLM8LcoQn V2szpI1hd4+9daY4scdoVEvYjQAAAWhpiZ9hAAAEAwBIMEYCIQCVttPbIBwjADqf PriS5WKussdT1zA/N0wt8Cbb+QM8oAIhAPi5nwBr4juHUhesASiG7vXldBYSr9Bs Mh8mLHm+sYP7MA0GCSqGSIb3DQEBCwUAA4IBAQAS5P5awen/RNyhVVIr+vt2B3ln Y7PojloFbHTSXN04ZchIeDpjlNYsjcGq7iUnreVKMDKzgE8OSbbK3YEg8vbimLUg aM7kyCZtu5lHWeAgerYltTIyv28Ii3SVrghvaj+GaloISys0ziRIyNAJl547huh6 +Tp75Oh+kbR9ROzIfj0iKiAdexXa/adGJ30x0FWwDw8z57Mvz9nFQJVhiMSbjhWF XLWKY+E/OQqMmdgzrn6M+unKudmA2zs13ih60kjUwSjj9nYZDgXCaxRK4hslS4FU WmHW+O8uWzvZY+bnzK15x/kHQ+1IZszs75NrbAnMzduJnSzR3d2EXdwNakc1 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d4qe+x0iPNd5mo3LoHj Kk/fgUNLTpMjrlDeQU0TgiJxFdLUztqHQi8nG6JAjU2rNtIJoFisNNRWFGPY0ddp vXhLY7NqW3QIYKmzV2qX4TPOi62wdruJjcYLPw231WCacOKqt3sGCHEpA2dtNo/d hpfP82OZPTqCkbciwuonVSzhnxUQ6fuzP+AATGfNAOEvMjtJBPZ4y4wif9zO6Bdq zEIUedN6CFEptpBgBgVdM+si/FViM+j1MIkEgx0lDpUdxYGFYBjByXTBe7biTxSv 6gHpbVMyRyPawqrMcoqSaY4zGVOY8MqlKIPu5EOWezkBit3xFf5bkYRIC5qMI22X CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 317869937657810869782804972172787453341795 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-20 03:34:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-20 03:34:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clubmanager.me' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28008219512270540102481944191382961597393455974233438293412457641788321091570890203282744954049250079047882615842442935770151616394263660954932399566827405246943349179887334954905158233894126235818344853271941132365048375345602444877958654092537361329075642020302977225474724810009092232251141305247514324303655260208383356371430819232375717076178337667376097431427064388331737830854345225118433394053890036869371895377881351814398586414011806846091185074541127327344360324025850461461908673085343152811871368843924722793771748009054587380682860534537415722934407531913529005484673027503573472694880703058234804377353 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b2e15da6da667ae805c4c9be5c55dab811bc4257 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1522 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afterguard.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tisailing.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowtostern.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castleharbor.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients-pinfirelabs.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients-pinfirestudios.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.pinfirelabs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.pinfirestudios.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clover.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hooferouting.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hooferscuba.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hooferscubaclub.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hoofersns.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoofers.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessons.hooferriding.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessons.hoofersailing.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.hoofermountaineering.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.hoofers.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.pi.theshop.build' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.sf.theshop.build' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.sj.theshop.build' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.theshop.build' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbss.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npsc.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocsc-sandbox.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocsc.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outdoor-uw.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pi.theshop.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pssi.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.bowtosternboating.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.tacomajrsail.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.hooferyouth.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.sailcalhoun.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.sailmpls.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.pugetsoundsailing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.sbsail.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.texassailing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochesteryc.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailcalhoun.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailmpls.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailsi.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-l.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-s.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbsail.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seasafaris.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hoofers.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.theshop.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sj.theshop.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spyc.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssc.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texas-sailing.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theshop.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tisc.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsa.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyc-youth.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wisconsin-basecamp.clubmanager.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yachtxp.clubmanager.me' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016869899f590000040300473045022100822d7fb221021a5ec46abff0cb981d0f8cb94590658339680cd371716a7d55170220187e01d954565c83a0d91aa3086b00333ecbd54ae5c41c94520bf642706506bd00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016869899f61000004030048304602210095b6d3db201c23003a9f3eb892e562aeb2c753d7303f374c2df026dbf9033ca0022100f8b99f006be23b875217ac012886eef5e5741612afd06c321f262c79beb183fb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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