junk.dana.org

Issued by R3

About this certificate

This digital certificate with serial number 03:3d:a4:83:00:d7:90:51:ce:14:79:68:80:f0:0f:60:e9:44 was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=junk.dana.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3d:a4:83:00:d7:90:51:ce:14:79:68:80:f0:0f:60:e9:44
Serial Number (int): 282312755776733900154870785207978231392580
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:fd:9c:5c:25:27:f7:3d:a7:63:fa:00:6a:0c:82:e1:98:41:d4:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2e:fa:3e:19:de:5a:46:51:f9:a3:4e:75:f9:15:01:04:7b:ff:c0:6e
Fingerprint (sha256): 16:29:22:0e:70:08:9d:79:e5:7e:9d:b8:b1:0c:17:25:13:85:21:f2:3b:17:37:6d:04:6b:3d:3f:87:2f:1b:c4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate junk.dana.org

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for junk.dana.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

junk.dana.org
junk2.dana.org
jwplayer.essence.com
kgqm.kjzz.org
kim.lovelace.shiatsusociety.org
kubernetes.govdelivery.com
laborlabsandbox.aflcio.org
landing.pacific.edu
law.ss.pacific.edu
ldap.cscc.unc.edu
liberalarts.ss.pacific.edu
libre.estadio.com
lindsay.mcny.org
live.aep.cornell.edu
live.bme.cornell.edu
live.cam.cornell.edu
live.mcgeorge.edu
live.ophd.pantheon.berkeley.edu
live.ucdavis.edu
m.voiceofsandiego.org
macaugaming.gsm.cornell.edu
mailams.ustelecom.org
makinghistory.gwu.edu
marketing.magicsoftware.com
mediaroom.livestrong.org
memberauth.audiology.org
microsites.globalwaters.org
mobilize.medika.life
mpo.gsm.cornell.edu
msa2016.berkeley.edu
multidev1.gc.cuny.edu
nartc.fcm.arizona.edu
nartechedge.nar.realtor
news.catholicschoolsbq.org
newsite.as-coa.org
next.warnerpacific.edu
noticias.lared.cl
null.actorsfund.org
odl.rutgers.edu
oksy.fronterasdesk.org
old.gistnetwork.org
oldsite.itu.edu
om.sterling.edu
online.foodsafety.msu.edu
pharmacy.ss.pacific.edu
pianolive.americamagazine.org
post-wp.religionnews.com
ppr.erdf.appcelerator.com
preview.dfa.cornell.edu
prod-www.chop.edu
programs.alvernia.edu
ps-pantheon.umdearborn.edu
psp.sandiegozoo.org
pubsrv.eforms.asu.edu
querybuilder.appcelerator.com
radsafe.berkeley.edu
rc.library.osu.edu
redesignhealthcare.mclaren.org
redirects.policy.cornell.edu
religion.berkeley.edu
requestgem.business.ucdenver.edu
resx.usc.edu
reweb.archbalt.org
rgd2020.rutgers.edu
rheumatology.utoronto.ca
rmp.rutgers.edu
rpgp.berkeley.edu
rstinstruments.rstinstruments.com
rstinstrumentsinfo.rstinstruments.com
ruby-staging.vilcek.org
scilsresx.rutgers.edu
sdgs-staging.scout.org
secure.tu.org
sexgenderlab.human.cornell.edu
slot.pbn-a56.rockhurst.edu
smtp.commonsensemedia.org
social.davidson.edu
sourceu.warnerpacific.edu
stage.onlineeducation.psu.edu
staging-na.altran.com
staging.freedomworks.org
stanfordsummersession.stanford.edu
states.drugpolicy.org
static5.bisparks.org
stfincrease.unlv.edu
store.actorsfund.org
summercollegeacademy.stanford.edu
support.doctorswithoutborders.org
sv3.presidio.edu
swfwmd.state.fl.us
t.wholegrainscouncil.org
tango.franklin.uga.edu
technoculturalstudies.ucdavis.edu
test.aep.cornell.edu
test.cam.cornell.edu
test.cee.cornell.edu
test.cochise.az.gov

Other certificates including the domain name dana.org

(limited to 100 certificates)
it.uahs.arizona.edu
streetfilms.org
www.design-engineering.princeton.edu
nxterra.ucop.edu
banking-business-review.com
www.blogs.earthjustice.org
www.dana.org
webdev.colorado.edu
virtual2.unlv.edu
hub.meed.com
www.dana.org
streetfilms.org
good.gsm.cornell.edu
nistmep.blogs.govdelivery.com
host2.openminds.com
local3599.com
www.esc.rutgers.edu
communityadvancementfirm.com
www.bodywerks-medspa.com
www.extension.ucdavis.edu
inside.gc.cuny.edu
5630742793027584-fe4.pantheonsite.io
nartc.fcm.arizona.edu
abong.ufcespanol.com
vpn.dana.org
5630742793027584-fe4.pantheonsite.io
banking-business-review.com
*.dana.org
nyexchange.dana.org
161511-web1.vilcek.org
www.dana.org
161511-web1.vilcek.org
asikmpo.discoverlosangeles.com
161511-web1.vilcek.org
international.dev.oceana.org
www.advising.arizona.edu
admission.gsm.cornell.edu
161511-web1.vilcek.org
*.dana.org
www.apac.arizona.edu
junk.dana.org
brainawarenessweek.org
afscme57.org
2fsupport.govdelivery.com
nxterra.ucop.edu
www.nartc.fcm.arizona.edu
161511-web1.vilcek.org
aaupnet.org
alldata.com
banking-business-review.com
sters.us
5630742793027584-fe4.pantheonsite.io
alldata.com
wireless.unlv.edu
deanbphilips.com
deanbphilips.com
hepwebstudy.org
intranet.olivecrest.org
banking-business-review.com
deanbphilips.com
streetfilms.org
streetfilms.org
161511-web1.vilcek.org
agenslotgacor.gsm.cornell.edu
dana.org
streetfilms.org
alldata.com
scilsresx.rutgers.edu
abong.ufcespanol.com
internal.gcir.org
junk.dana.org
2020.sundialsolarenergy.com
www.cbs.asu.edu
cerebrum.dana.org
www.inas2.uga.edu
advance.cccu.org
projectshare.sfsu.edu
161511-web1.vilcek.org
banking-business-review.com
www.eventsinfo.presidio.edu
banking-business-review.com
international.research.ucsb.edu
online.asu.edu
5-bdrtglrsmitrpcya.centricconsulting.com
ordbc.arizona.edu
alldata.com
international.research.ucsb.edu
www.archydro.crwr.utexas.edu
on.dana.org
161511-web1.vilcek.org
banking-business-review.com
2021convention.ncte.org
aaupnet.org
radsafe.berkeley.edu
161511-web1.vilcek.org
seotest.clorox.com
5630742793027584-fe4.pantheonsite.io
junk.dana.org
2fwww.govdelivery.com
www.acims.arizona.edu

Certificate

The complete raw certificate details for junk.dana.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSnemv0wZzcXAgMkBQX
ztwjNHFrHpIs5axrzzrdlw7T+GZAQLPiUvSZmF3ScRQ1Ni77M7wvvj8WKgEm6kmk
IGsqEr1NwVO/9M+bfL4ePy1ywV87Wx7ZOVVK4JWJMqctOtWZynJz3jX67Nda0+9B
++4/N4TAaLpUnxu83mMaTL+l/8yYin0iItxxZ3YRMvL8oMO9BWqFighCSszfIpRu
fGHjpEeodJZe7aLi7DcePvwyXZWi/al1YQeCdFkrpkcgk8myhP/APzQjk3bdKAlw
KQDdvQR4Y3b+bMJVibDWVrVqjLz+ybpaAJiOjKOmp9NDC6LZPJujVsE+mvYR8y2Z
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282312755776733900154870785207978231392580
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 05:22:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 05:22:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'junk.dana.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295278889261962340330570593076765092564594026629510040566849443941721212705222905469227342749655760761925628146467776896918161669177237506061638055976839317974540229085566909601290432792766688540743857041618507082302908209321494362376641574366690514136936988276436757394515726000349835912320682069511736058985263380188984941851626522348036976567257123937402752130277851931257557691396509910741392947845349707974538616547869499133806197294376341097227039876415788275764051935080580783290065738507278734728703160147978353048962982659390140744073959855669537306275821116832669307766091573181749448001568724078979553621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9afd9c5c2527f73da763fa006a0c82e19841d49a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2339 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junk.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junk2.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwplayer.essence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kgqm.kjzz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kim.lovelace.shiatsusociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubernetes.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laborlabsandbox.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldap.cscc.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberalarts.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libre.estadio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindsay.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.bme.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.mcgeorge.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.voiceofsandiego.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macaugaming.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailams.ustelecom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.magicsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaroom.livestrong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memberauth.audiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsites.globalwaters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilize.medika.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpo.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msa2016.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multidev1.gc.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartechedge.nar.realtor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.catholicschoolsbq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsite.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.warnerpacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noticias.lared.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'null.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odl.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oksy.fronterasdesk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.gistnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldsite.itu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'om.sterling.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.foodsafety.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacy.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianolive.americamagazine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'post-wp.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppr.erdf.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.dfa.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-www.chop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programs.alvernia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-pantheon.umdearborn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psp.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubsrv.eforms.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'querybuilder.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsafe.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.library.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redesignhealthcare.mclaren.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirects.policy.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religion.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'requestgem.business.ucdenver.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reweb.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgd2020.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmp.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpgp.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstruments.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstrumentsinfo.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruby-staging.vilcek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scilsresx.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdgs-staging.scout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexgenderlab.human.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot.pbn-a56.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.commonsensemedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.davidson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourceu.warnerpacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-na.altran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.freedomworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanfordsummersession.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'states.drugpolicy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static5.bisparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfincrease.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summercollegeacademy.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv3.presidio.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swfwmd.state.fl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.wholegrainscouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tango.franklin.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technoculturalstudies.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cee.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cochise.az.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018caf1670de0000040300473045022100d1aca8a7ae5115ec6beb9d8cbed210feb28397d2e072b4d7ff11c5e88bb7342a02203b34609177f500f5066af1c77e4213b4bcfbc0b44237f4fe8c99bd48c534cd32007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018caf1673140000040300483046022100e48c0d827abc35666b7bc501e736a60a0db81783f9a7f6a5032c405f9391c75e022100c13b3786b6f54bad62c8d67d0a9569b1ccf3a5b5d81b3a9bb91a660d14bb3d9e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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