afscme57.org

Issued by R3

About this certificate

This digital certificate with serial number 04:09:41:5a:a9:00:f0:5d:0a:46:bd:54:bb:13:8f:3a:a1:31 was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=afscme57.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:09:41:5a:a9:00:f0:5d:0a:46:bd:54:bb:13:8f:3a:a1:31
Serial Number (int): 351598555583574332322010512953417091686705
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 40:15:87:f2:6c:fe:44:32:65:ce:c4:c6:1b:2c:ff:e5:cc:6b:90:04
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 38:ae:c5:a9:17:86:1b:0b:94:9d:42:f3:bf:f3:3b:68:e9:e7:b9:1d
Fingerprint (sha256): 17:54:68:5c:ab:2e:37:70:dc:fa:58:e3:a6:ee:89:91:af:56:17:56:48:09:03:e4:44:a8:cf:98:d6:16:d9:4c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate afscme57.org

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for afscme57.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

160.167.tmcapital.com
161511-web1.vilcek.org
21.calrest.org
39.calrest.org
aarpconverge-model.softheon.com
ab-csp.edu.help
abc.appcelerator.com
act.americancouncils.org
act.mattek.com
admin.mrc.org
admin.nacha.org
admin.operationhope.org
admin.sdzsafaripark.org
adminanimals.sandiegozoo.org
administration.unlv.edu
adminsvcs.unlv.edu
advertise.tu.org
afasmtp.actorsfund.org
afscme57.org
aiq.adisa.org
alc.bloomfield.edu
alpha1.americanancestors.org
amsoc6.as-coa.org
andersoncollection.stanford.edu
anniversaries.uahs.arizona.edu
api-staging.scout.org
app.familyexpectations.com
apply.mgait.in
apps.americancouncils.org
apps.mcny.org
archnet.archbalt.org
ariel.ppld.org
arkofhope.crs.org
arrow.appcelerator.com
ascoa-awsdc.as-coa.org
asdwsws.connorsstate.edu
atv.law.nyu.edu
autodiscoverla.actorsfund.org
awards.opcw.org
b.ns.christiancentury.org
b.programs.online.utica.edu
babipedas.cmmb.org
backend-dev.stargate.mgm.com
bandar.rockhurst.edu
banking-business-review.com
belkin.rutgers.edu
beta.skyandtelescope.org
bff.franklin.uga.edu
bickertonportables.co.uk
bigidea.rutgers.edu
biopoliticaltimes.org
blog.brightfarms.com
blogs.earthjustice.org
bold.albion.edu
boxoffice.mcny.org
brainweek.dana.org
brassunion.com
broadway.playhousesquare.org
bso.ac.uk
buyersguide.aaps.org
caanz-top-100.afr.com
cal.test.flwright.org
caldesignlab.berkeley.edu
california.catholicreview.org
caminosseguros.iadb.org
campaign.ucsc.edu
canal9.com.ar
careers.whittier.edu
carpepm.almonds.com
cci520-new.courtinnovation.org
cdi.uga.edu
cdn-test.battlefields.org
cen-stage.hosting.cornell.edu
cornthins.com
cultureoflife.org
datahero.com
eduhup.com
executionists.com
floridahospitalcancer.com
gmi.edu
hamiltonexhibition.com
jche.org
leeanatankersley.com
live-ipmb.pantheonsite.io
live-legacy-cms.pantheonsite.io
live-ucf-qmi.pantheonsite.io
nobleenergyinc.com
pacific.edu
streamingobserver.com
thepointalehouse.com
whittleschool.org
wptblog.org

Other certificates including the domain name afscme57.org

(limited to 100 certificates)
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io
5643440998055936-fe2.pantheonsite.io
5643440998055936-fe2.pantheonsite.io
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io
afscmeatwork.org
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io
afscme57.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io
afscmeatwork.org
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io
5643440998055936-fe2.pantheonsite.io
5643440998055936-fe2.pantheonsite.io
5643440998055936-fe2.pantheonsite.io
afscmeatwork.org
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io
afscmeatwork.org
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io
5643440998055936-fe2.pantheonsite.io
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io
afscmeatwork.org
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io
5643440998055936-fe2.pantheonsite.io
5643440998055936-fe2.pantheonsite.io
5643440998055936-fe2.pantheonsite.io
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io
5643440998055936-fe2.pantheonsite.io
afscmeatwork.org
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io
afscmeatwork.org
afscmeatwork.org
afscmeatwork.org
5643440998055936-fe2.pantheonsite.io

Certificate

The complete raw certificate details for afscme57.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN15oeaas7UjHG17MrMh
Q0Wh+CPXZQe7WRP47PAWoedjUK9tGOY6MP7G6UG5NMWPd73SGDn2LBnc/U/GcWL3
mGtC5M47KhkZs2HbGImTA7SJiw5JueIw8enznhwgwDzmBleAG0Qg9s/RSFmw0e7y
4CqxOa6flamd0weNup4ktrv5IAFkwb5SNCMlFNWXyu4cJCUtUdnEX0lpTPSIK/uT
6voCDiEdXxnl15TTS2A8OYkhGyhvGxL9hYDS2uvR53Je7hbuCqGkUZaSed2/r42M
IqHw1nN4GC0lGGISh2CQvH9gtOb6LYHTwAD2yty1t4gTMplxLHFDdwPpa2d+RFkn
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351598555583574332322010512953417091686705
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 18:40:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-24 18:40:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afscme57.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19297435810238244716322818920723853065064000181636968677920963740423679467601771166356730853590795188821373840577059371332747157619118677845787444284776264710750238633761123429788490529324370144620058406544174541958557396000558843607264593798701877777042297312401561008527069122385489941178730955074494395103590191520659337941993973632303456617273170090303164783362414637609442992705096806592110449151380255208978491086244425284950374539928179459907084901982405264983978155263287133961632659384813749624645833985516414570607834761519187920636763888682777225455843864929898099360676518408971116553929404277897094047743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							401587f26cfe443265cec4c61b2cffe5cc6b9004
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2021 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '160.167.tmcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '161511-web1.vilcek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '21.calrest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '39.calrest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aarpconverge-model.softheon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ab-csp.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abc.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.mattek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.operationhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sdzsafaripark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminanimals.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'administration.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminsvcs.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertise.tu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afasmtp.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afscme57.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq.adisa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alc.bloomfield.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha1.americanancestors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amsoc6.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersoncollection.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anniversaries.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-staging.scout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.familyexpectations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.mgait.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archnet.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ariel.ppld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkofhope.crs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrow.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascoa-awsdc.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asdwsws.connorsstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atv.law.nyu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscoverla.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awards.opcw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b.ns.christiancentury.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b.programs.online.utica.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babipedas.cmmb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend-dev.stargate.mgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandar.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banking-business-review.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belkin.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.skyandtelescope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bff.franklin.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bickertonportables.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigidea.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biopoliticaltimes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.brightfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bold.albion.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainweek.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brassunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadway.playhousesquare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bso.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyersguide.aaps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caanz-top-100.afr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cal.test.flwright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caldesignlab.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'california.catholicreview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caminosseguros.iadb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canal9.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.whittier.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carpepm.almonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cci520-new.courtinnovation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdi.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-test.battlefields.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cen-stage.hosting.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornthins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cultureoflife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datahero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduhup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'executionists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floridahospitalcancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmi.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamiltonexhibition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jche.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leeanatankersley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-ipmb.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-legacy-cms.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-ucf-qmi.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nobleenergyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamingobserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepointalehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whittleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wptblog.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f16c650ca000004030046304402203780c732383b132d6bb5cb155ff4f8c9c241b5f20f1be2338356a1c4bf14d507022055fa940af1113013783239a1693fb5b8831a28ba665e412f9d48023f3822df18007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f16c6515300000403004730450221009ed50bd1b72cd66c53fbe58172c825a3cbd3288be172114b14094537a46538960220639e564306eab1064a95f914c608577bfc7c4bb510e9c3b234a7cb196eaf4621
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000d00547bc1ecc86639e32fb232c8ddde0f44590c43b5892835f6af98e3965b08210c3ffa2732d5824d6163530fea30d5356e0c23dbd78fc4c86421278ddd348a102ab23c5c25afbdf3deca9fbc6ca06eac554d3da15b9b9ddce030cfd93b80563fe9698b5b1599f4f8a01e39812e7d913d8b0bbe905919920b4c01cb426d044f73bb35214040c9db89ef5d3a367284b7256343699191c1e22ecd817a1b26c9c75f7576ff2ae65874a8a6925990bfa2509197a7625bcfe293479f254db2e02b4779c4c32ea1a896060c0b424991e37b48d101dafbbc22082f1e28bdf9d7d87241aeb9077372fb69e0b299395320e5d6a5abda138a3362629064486491a567c7e1