clubmanager.me

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:68:84:cd:a4:c7:7d:4d:31:5c:e1:a6:f6:b6:d5:06:84:f6 was issued on by Let's Encrypt.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=clubmanager.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:84:cd:a4:c7:7d:4d:31:5c:e1:a6:f6:b6:d5:06:84:f6
Serial Number (int): 296902749813478306960787458202871563453686
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:a4:a6:9f:c2:ed:44:10:d8:ca:2b:26:e4:9e:b5:fc:46:36:15:2c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cd:e7:3d:67:90:97:13:63:a3:67:8d:ef:c6:38:df:9a:0d:ac:8f:af
Fingerprint (sha256): 17:8d:29:67:ea:8d:af:30:ed:5c:15:48:90:97:e9:21:2d:6b:02:c6:53:17:cd:54:6b:05:b3:e3:ca:05:52:e1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate clubmanager.me

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clubmanager.me

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afterguard.clubmanager.me
app.tisailing.org
bowtostern.rechub.net
clients-pinfirelabs.clubmanager.me
clients-pinfirestudios.clubmanager.me
clients.pinfirelabs.com
clients.pinfirestudios.com
clover.clubmanager.me
clubmanager.me
connect.youthsailingva.org
demo.clubmanager.me
events.hooferouting.org
events.hooferscuba.org
events.hooferscubaclub.org
events.hoofersns.org
ggyc.rechub.net
hoofers.clubmanager.me
jcx.rechub.net
layc.rechub.net
lessons.hooferriding.org
lessons.hoofersailing.org
members.hoofermountaineering.org
members.hoofers.org
members.jumpclimbextreme.com
mendotayc.rechub.net
my.mendotayc.org
nbss.clubmanager.me
newportbeachsail.rechub.net
ohvma.rechub.net
outdoor-uw.clubmanager.me
pssi.clubmanager.me
regattapoint.rechub.net
register.yachtxp.com
registration.bowtosternboating.com
registration.regattapoint.org
registration.sailmpls.org
reservations.pugetsoundsailing.com
reserve.sbsail.com
reserve.texassailing.com
rochesteryc.clubmanager.me
sailmpls.clubmanager.me
sailsi.clubmanager.me
sandbox-l.clubmanager.me
sandbox-s.clubmanager.me
sbsail.clubmanager.me
seasafaris.clubmanager.me
secure.hoofers.org
skiing.sandbox.rechub.app
spyc.clubmanager.me
ssc.clubmanager.me
texas-sailing.clubmanager.me
tisc.clubmanager.me
usscmc.rechub.net
wisconsin-basecamp.clubmanager.me
yachtxp.clubmanager.me
ycsh.rechub.net
ysv.rechub.net

Other certificates including the domain name clubmanager.me

(limited to 100 certificates)
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
www-source.pinfirelabs.com
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
staging.clubmanager.me
clubmanager.me
docs-source.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
clubmanager.me
clover.clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
www-source.pinfirelabs.com
staging.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
*.clubmanager.me
craft-dev.clubmanager.me
clubmanager.me
*.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
updates.clubmanager.me
clubmanager.me
events.hooferouting.org
clover.staging.clubmanager.me
clover.staging.clubmanager.me
clubmanager.me
utils.clubmanager.me
staging.clubmanager.me
*.clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clover.staging.clubmanager.me
clover.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
utils.clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
pinfirelabs.com

Certificate

The complete raw certificate details for clubmanager.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNCGakeBYSOq9c19QrBB
b8Vu5PG9QCFfIkeRYaehU1aOU8tj/ysUUd3694UVWIbWb3Q41uFLi4cv20SSnb1B
TRmk0m7h8m/Mc/K5fqNPwIpkaApxggeFYOUgl2KFkWPR4gtgIy0Rulf7BpOgcWkT
R9bQRoR0Ye0AccAA4PuwMtaBjp+ypTeu4I2EJOhYsRII1FGLLmaoeQxeHbMptwZC
8JaNGTdqnr/lLeDoVOOB5iVlgS3EOVtCQNHKQSCcI0Y0F2hTN+UYXup7bOpErhqy
YNpAFykFp1FRb5Qau0BRZMxuyzy33pjAXtyhHYRjFuCtc902ePjyFICv+vvcnQxS
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296902749813478306960787458202871563453686
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 23:27:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-29 23:27:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clubmanager.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21310862773421125718549742300734040434003712724364786184372877877417247496598223022940952924091690307381620430011351371672530321206132962112968967041452180096307414191123430987960076868082427490741644380446697810701861434217541693202138773128171578242524418634227785211113311912625442920593543261822623003367832812872090691317275773079810300371193104979157976485927256352215970373739496542090561990525871096319946368006719035686058133327279335222331486115374552034607724794912170171194494418285062562588706215815115307592045463138081757750023897254166954582019621950852590662659698614712941305977562749967762719527517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							efa4a69fc2ed4410d8ca2b26e49eb5fc4636152c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1407 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afterguard.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tisailing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowtostern.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients-pinfirelabs.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients-pinfirestudios.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.pinfirelabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.pinfirestudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clover.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.youthsailingva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hooferouting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hooferscuba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hooferscubaclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hoofersns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggyc.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoofers.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcx.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'layc.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessons.hooferriding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessons.hoofersailing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.hoofermountaineering.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.hoofers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.jumpclimbextreme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendotayc.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.mendotayc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbss.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newportbeachsail.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohvma.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outdoor-uw.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pssi.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regattapoint.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.yachtxp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.bowtosternboating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.regattapoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.sailmpls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.pugetsoundsailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.sbsail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.texassailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochesteryc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailmpls.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailsi.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-l.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-s.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbsail.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seasafaris.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hoofers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skiing.sandbox.rechub.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spyc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texas-sailing.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tisc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usscmc.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wisconsin-basecamp.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yachtxp.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ycsh.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ysv.rechub.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001713322b82b0000040300473045022053b79decf37f0d63aeeb74c9678c530707bf42daf3b697d6a5e679521884c76102210092f4cebf3fb2a3deadcc50b89c313ba5d29a482c4d591a74d958d0e4cd7ed5db00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001713322b87e00000403004630440220645c1337689db433aa3b98ca470848b0a5f0ee5e50fbfe5ea507fc47c17cbd25022031acf522ce3a3d18d2c77b9fb4bd838955a5943a2bb5d607fa484be927482346
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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