academic.gsm.cornell.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:8a:f3:c9:b1:10:8d:78:9a:50:22:f9:97:92:10:63:6c:c5 was issued on by Let's Encrypt.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=academic.gsm.cornell.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8a:f3:c9:b1:10:8d:78:9a:50:22:f9:97:92:10:63:6c:c5
Serial Number (int): 308619874076312481588066110028885849763013
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2d:41:c6:6a:c2:33:9b:c8:9b:7d:2c:f8:97:df:67:1c:90:2b:7b:f0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fb:39:51:7d:35:c2:10:15:f8:06:42:c1:9d:e5:f1:fa:3f:1e:0a:2e
Fingerprint (sha256): 19:9c:ad:14:ac:09:67:75:17:9a:cf:25:b3:81:69:19:50:82:5a:36:d7:4c:98:7c:85:73:ce:b6:2d:84:c6:e1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate academic.gsm.cornell.edu

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for academic.gsm.cornell.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

academic.gsm.cornell.edu
agen-togel-hadiah.advanceweb.com
amp.gsm.cornell.edu
archive.willienelson.com
bbsr-mirror.usc.edu
bookpackers.usc.edu
br.draxe.com
college.usc.edu
covid19.slac.stanford.edu
cxengage.lifesize.com
d8-prelive.topuniversities.com
dev-awards.hsj.co.uk
dev-gsas.harvard.edu
dev.benchmark.aota.org
dev.yaleclimateconnections.org
digitallibrary.med.harvard.edu
doorbell.xd.comcast.com
feministartproject.rutgers.edu
fta.campusservices.harvard.edu
hahahihi.democracyconvention.org
hub.creighton.edu
immersive.canberratimes.com.au
info-libraries.mit.edu
kontalsa.gsm.cornell.edu
legion.famsf.org
maei-ieam.ca
mph.rutgers.edu
music.rpi.edu
nuclearfutures.princeton.edu
nukegamingslot.gsm.cornell.edu
obegisa.es
ocowners.huhousing.harvard.edu
okbet.gsm.cornell.edu
old.topuniversities.com
performanceacademy.underarmour.com
phillips66.wfscorp.com
pifs.law.harvard.edu
preview.finance.cornell.edu
qa.developer.nielsen.com
schools-guide-2022.smh.com.au
sciencefilms.usc.edu
seer.usc.edu
situsbandartogel.gsm.cornell.edu
skyservices.wfscorp.com
societyoffellows.usc.edu
stage-hsc-study-guide-2018.canberratimes.com.au
staging-independent-schools-2022.smh.com.au
staging-schools-guide-2022.smh.com.au
streetfilms.streetsblog.org
students-sdm.blogs.rutgers.edu
success-test.kaiserpermanente.org
techcareers.keurigdrpepper.com
test-gsas.harvard.edu
togel-pasaran.advanceweb.com
toto-macau-terbaru.gsm.cornell.edu
umavisaoparaofuturo.com.br
venturenorthconference.com
www.cbs-bcs.org
www.cetl.kennesaw.edu
www.college.usc.edu
www.countway.med.harvard.edu
www.dysarttaylor.law
www.europe.alldata.com
www.umavisaoparaofuturo.com.br

Other certificates including the domain name cornell.edu

(limited to 100 certificates)
usda-int.library.cornell.edu
island.cnf.cornell.edu
dbme.dyson.cornell.edu
www.llmoverview.law.cornell.edu
dfbs.cornell.edu
engr-cms-multi-ssl.cit.cornell.edu
staticweb.ssit.scl.cornell.edu
atstaticapps.cit.cornell.edu
ubsc.cornell.edu
newstudents.cornell.edu
test-web-lws.edu.help
www.nys4h.cce.cornell.edu
5769623379116032-fe2.pantheonsite.io
carpepm.almonds.com
5693048138760192-fe2.pantheonsite.io
*.givegab.com
dns-vetting1c.map.fastly.net
5686812383117312-fe3.pantheonsite.io
allianceforscience.cornell.edu
scholarship.sha.cornell.edu
vertere.ehs.cornell.edu
llmoverview.law.cornell.edu
5764748591235072-fe2.pantheonsite.io
5747286126624768-fe3.pantheonsite.io
manage.esign.cornell.edu
fs-lb-1.fs.cornell.edu
it.uahs.arizona.edu
www.pryde.bctr.cornell.edu
cluster3.technolutions.net
lingual.phonetics.cornell.edu
apl.cs.cornell.edu
annualreport.cals.cornell.edu
crane.chem.cornell.edu
badwall.cac.cornell.edu
resumebook.acsu.cornell.edu
scabusa.ag.cornell.edu
5727217287954432-fe1.pantheonsite.io
3cpg.cornell.edu
ucdc.edu
cluster3.technolutions.net
classcouncil.cornell.edu
5693048138760192-fe2.pantheonsite.io
5202656289095680-fe4.pantheonsite.io
kanbur.aem.cornell.edu
cals.cornell.edu
5691420614590464-fe3.pantheonsite.io
aws-110-042.internal.library.cornell.edu
5709068098338816-fe3.pantheonsite.io
5636647567753216-fe1.pantheonsite.io
hdil.human.cornell.edu
nartc.fcm.arizona.edu
sf-lib-lms-018.serverfarm.cornell.edu
legacy.ece.cornell.edu
verne.soc.cornell.edu
blog.johnson.cornell.edu
5730774057746432-fe4.pantheonsite.io
5654672874405888-fe3.pantheonsite.io
avedon.med.cornell.edu
calendar.sdzsafaripark.org
5763210187636736-fe2.pantheonsite.io
engineering.cornell.edu
s001.med.cornell.edu
puppet.coecis.cornell.edu
sullivan.cce.cornell.edu
coffeabase.org
5707324073181184-fe2.pantheonsite.io
5700866052980736-fe2.pantheonsite.io
bearinmind.eclipsco.org
gunalert02.ornith.cornell.edu
3fadmin.govdelivery.com
d2.shared.global.fastly.net
tier.dyson.cornell.edu
newfit.cit.cornell.edu
5658962204557312-fe4.pantheonsite.io
5736907271045120-fe1.pantheonsite.io
library.cornell.edu
pryde.bctr.cornell.edu
lassp.cornell.edu
newsletter.research.cornell.edu
5686536431468544-fe1.pantheonsite.io
streetfilms.org
5763210187636736-fe2.pantheonsite.io
5659822271758336-fe3.pantheonsite.io
5654961308303360-fe2.pantheonsite.io
charon.ece.cornell.edu
www.cmm.cornell.edu
delib-cal.qatar-weill.cornell.edu
urmc.cs.cornell.edu
calscomlabs-multi-ssl.cit.cornell.edu
webeditor.dyson.cornell.edu
5769623379116032-fe2.pantheonsite.io
dns-vetting1g.map.fastly.net
5736907271045120-fe1.pantheonsite.io
5740240702537728-fe2.pantheonsite.io
hotelie.sha.cornell.edu
courses1.cit.cornell.edu
5637369860456448-fe1.pantheonsite.io
www.systems.cs.cornell.edu
forms-dev.serverfarm.cornell.edu
werdle.via.cornell.edu

Certificate

The complete raw certificate details for academic.gsm.cornell.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILjDCCCnSgAwIBAgISA4rzybEQjXiaUCL5l5IQY2zFMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA4MTUyMTA0MzdaFw0yMzExMTMyMTA0MzZaMCMxITAfBgNVBAMT
GGFjYWRlbWljLmdzbS5jb3JuZWxsLmVkdTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPSTetUdDhE6MnPQiGm9TXxT73vRxgxqyhmCNsSGQ49YNP2KVbx4
s6D0Jo5IXIH38NAy7SHHaipmcFlEUJCnQD9thhgETPCy2h0xo9vwM7lOQmRjRDD3
L2t2DVoEJPYWPtLp17r/0+L3YE/9xW8Lh+11S7ruIPnM5WzM67lPmMueLNb8qdVu
Pza2gKvE/alVGAS7adVL88NryeDECF3WnjUb4Eal1qUR4IMnmg/9g6ztcFwAeGGP
rE7i2PxMboIfBtOe7KBh8IkDWupsj+np3MCwJllNJad3m1vdYgI+Yw+aocCQkqes
TW69dLow66v2CitAVJvXRR99W5kAevA0JLkCAwEAAaOCCKkwggilMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQULUHGasIzm8ibfSz4l99nHJAre/AwHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wggaxBgNVHREEggaoMIIGpIIYYWNhZGVtaWMuZ3NtLmNvcm5l
bGwuZWR1giBhZ2VuLXRvZ2VsLWhhZGlhaC5hZHZhbmNld2ViLmNvbYITYW1wLmdz
bS5jb3JuZWxsLmVkdYIYYXJjaGl2ZS53aWxsaWVuZWxzb24uY29tghNiYnNyLW1p
cnJvci51c2MuZWR1ghNib29rcGFja2Vycy51c2MuZWR1ggxici5kcmF4ZS5jb22C
D2NvbGxlZ2UudXNjLmVkdYIZY292aWQxOS5zbGFjLnN0YW5mb3JkLmVkdYIVY3hl
bmdhZ2UubGlmZXNpemUuY29tgh5kOC1wcmVsaXZlLnRvcHVuaXZlcnNpdGllcy5j
b22CFGRldi1hd2FyZHMuaHNqLmNvLnVrghRkZXYtZ3Nhcy5oYXJ2YXJkLmVkdYIW
ZGV2LmJlbmNobWFyay5hb3RhLm9yZ4IeZGV2LnlhbGVjbGltYXRlY29ubmVjdGlv
bnMub3Jngh5kaWdpdGFsbGlicmFyeS5tZWQuaGFydmFyZC5lZHWCF2Rvb3JiZWxs
LnhkLmNvbWNhc3QuY29tgh5mZW1pbmlzdGFydHByb2plY3QucnV0Z2Vycy5lZHWC
HmZ0YS5jYW1wdXNzZXJ2aWNlcy5oYXJ2YXJkLmVkdYIgaGFoYWhpaGkuZGVtb2Ny
YWN5Y29udmVudGlvbi5vcmeCEWh1Yi5jcmVpZ2h0b24uZWR1gh5pbW1lcnNpdmUu
Y2FuYmVycmF0aW1lcy5jb20uYXWCFmluZm8tbGlicmFyaWVzLm1pdC5lZHWCGGtv
bnRhbHNhLmdzbS5jb3JuZWxsLmVkdYIQbGVnaW9uLmZhbXNmLm9yZ4IMbWFlaS1p
ZWFtLmNhgg9tcGgucnV0Z2Vycy5lZHWCDW11c2ljLnJwaS5lZHWCHG51Y2xlYXJm
dXR1cmVzLnByaW5jZXRvbi5lZHWCHm51a2VnYW1pbmdzbG90LmdzbS5jb3JuZWxs
LmVkdYIKb2JlZ2lzYS5lc4Ieb2Nvd25lcnMuaHVob3VzaW5nLmhhcnZhcmQuZWR1
ghVva2JldC5nc20uY29ybmVsbC5lZHWCF29sZC50b3B1bml2ZXJzaXRpZXMuY29t
giJwZXJmb3JtYW5jZWFjYWRlbXkudW5kZXJhcm1vdXIuY29tghZwaGlsbGlwczY2
Lndmc2NvcnAuY29tghRwaWZzLmxhdy5oYXJ2YXJkLmVkdYIbcHJldmlldy5maW5h
bmNlLmNvcm5lbGwuZWR1ghhxYS5kZXZlbG9wZXIubmllbHNlbi5jb22CHXNjaG9v
bHMtZ3VpZGUtMjAyMi5zbWguY29tLmF1ghRzY2llbmNlZmlsbXMudXNjLmVkdYIM
c2Vlci51c2MuZWR1giBzaXR1c2JhbmRhcnRvZ2VsLmdzbS5jb3JuZWxsLmVkdYIX
c2t5c2VydmljZXMud2ZzY29ycC5jb22CGHNvY2lldHlvZmZlbGxvd3MudXNjLmVk
dYIvc3RhZ2UtaHNjLXN0dWR5LWd1aWRlLTIwMTguY2FuYmVycmF0aW1lcy5jb20u
YXWCK3N0YWdpbmctaW5kZXBlbmRlbnQtc2Nob29scy0yMDIyLnNtaC5jb20uYXWC
JXN0YWdpbmctc2Nob29scy1ndWlkZS0yMDIyLnNtaC5jb20uYXWCG3N0cmVldGZp
bG1zLnN0cmVldHNibG9nLm9yZ4Iec3R1ZGVudHMtc2RtLmJsb2dzLnJ1dGdlcnMu
ZWR1giFzdWNjZXNzLXRlc3Qua2Fpc2VycGVybWFuZW50ZS5vcmeCHnRlY2hjYXJl
ZXJzLmtldXJpZ2RycGVwcGVyLmNvbYIVdGVzdC1nc2FzLmhhcnZhcmQuZWR1ghx0
b2dlbC1wYXNhcmFuLmFkdmFuY2V3ZWIuY29tgiJ0b3RvLW1hY2F1LXRlcmJhcnUu
Z3NtLmNvcm5lbGwuZWR1ghp1bWF2aXNhb3BhcmFvZnV0dXJvLmNvbS5icoIadmVu
dHVyZW5vcnRoY29uZmVyZW5jZS5jb22CD3d3dy5jYnMtYmNzLm9yZ4IVd3d3LmNl
dGwua2VubmVzYXcuZWR1ghN3d3cuY29sbGVnZS51c2MuZWR1ghx3d3cuY291bnR3
YXkubWVkLmhhcnZhcmQuZWR1ghR3d3cuZHlzYXJ0dGF5bG9yLmxhd4IWd3d3LmV1
cm9wZS5hbGxkYXRhLmNvbYIed3d3LnVtYXZpc2FvcGFyYW9mdXR1cm8uY29tLmJy
MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA
tz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGJ+zq8kgAABAMARjBE
AiAXnBfmldhsDYdAWMiOtcrzRYkJqrvniLw7sxcPEyFoNwIgS77I2Dfkq/6t+qID
dfe1VbZgxOymihDgUDK7hUuj7bIAdgB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9Ir
wTpXo1LrUgAAAYn7OryyAAAEAwBHMEUCIGjF4BHb4z7apSmRKjHMzbXAS1YIaj0I
guvoyYeIxrA1AiEAlat3/frW3dVRdFFHVowETaTTeWJmZ+N7tkQNhwo0ZCcwDQYJ
KoZIhvcNAQELBQADggEBAEBkOk6m1YaVtEgUSrQN6vX9Q8oo2ShtLg2TOEY7ROva
9Q240m8f2nzlD6ucme/bUFvMNtS/B2HtZlv0XnXhSo1xzFfrqP8F3eL7tdQ1kyZC
458oayxPXPCDVCNZ+nnpfsG9iuI/LDOAtA45oaRlZzTcBxSBiB1XqKclldcbi2zW
jKu3IvzhA1IGg6nXRqzEE1Av3nSTDbwM854KjQxnrEU7456k6zUu/oOV6qLdz209
5OBf6yFqF454tRRyD2hW3oWVNoCPtgnOdIws2bPOLpopdTIAkKYxUvsvRyycqQC3
OXe6bnjqAdeuOUheeJhuGmnaeTxBd7BVz9lgSq01c0o=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JN61R0OEToyc9CIab1N
fFPve9HGDGrKGYI2xIZDj1g0/YpVvHizoPQmjkhcgffw0DLtIcdqKmZwWURQkKdA
P22GGARM8LLaHTGj2/AzuU5CZGNEMPcva3YNWgQk9hY+0unXuv/T4vdgT/3FbwuH
7XVLuu4g+czlbMzruU+Yy54s1vyp1W4/NraAq8T9qVUYBLtp1Uvzw2vJ4MQIXdae
NRvgRqXWpRHggyeaD/2DrO1wXAB4YY+sTuLY/Exugh8G057soGHwiQNa6myP6enc
wLAmWU0lp3ebW91iAj5jD5qhwJCSp6xNbr10ujDrq/YKK0BUm9dFH31bmQB68DQk
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308619874076312481588066110028885849763013
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-15 21:04:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 21:04:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'academic.gsm.cornell.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30874871418674330599856582475032938667375268619443001630863980336265595132255055319191643458111097912849518683644418268103987213994455977559607858848119842980533392049063729003920357542074988987461137585846020662431659934377838370289619002655875385799518291331039036698807426681817568646147255938646103126008097680224992782780625624378043298116774876838353123724342507002380006971784078794529182989372683470709944523843444459913842097363110245276310289984800758291731507727636966622104526315616493280025870076217545288249244971934789372294783507838417764757756356243493322858302549568740438214483485562672125977044153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d41c66ac2339bc89b7d2cf897df671c902b7bf0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1704 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academic.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agen-togel-hadiah.advanceweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.willienelson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbsr-mirror.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookpackers.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.draxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'college.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19.slac.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cxengage.lifesize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd8-prelive.topuniversities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-awards.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-gsas.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.benchmark.aota.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.yaleclimateconnections.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitallibrary.med.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doorbell.xd.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feministartproject.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fta.campusservices.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hahahihi.democracyconvention.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.creighton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immersive.canberratimes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info-libraries.mit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kontalsa.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legion.famsf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maei-ieam.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mph.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.rpi.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuclearfutures.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nukegamingslot.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obegisa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocowners.huhousing.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okbet.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.topuniversities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performanceacademy.underarmour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phillips66.wfscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pifs.law.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.finance.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.developer.nielsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schools-guide-2022.smh.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciencefilms.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seer.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situsbandartogel.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyservices.wfscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'societyoffellows.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-hsc-study-guide-2018.canberratimes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-independent-schools-2022.smh.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-schools-guide-2022.smh.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streetfilms.streetsblog.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'students-sdm.blogs.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'success-test.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techcareers.keurigdrpepper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-gsas.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togel-pasaran.advanceweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toto-macau-terbaru.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umavisaoparaofuturo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturenorthconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbs-bcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cetl.kennesaw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.college.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countway.med.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dysarttaylor.law'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.europe.alldata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umavisaoparaofuturo.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189fb3abc9200000403004630440220179c17e695d86c0d874058c88eb5caf3458909aabbe788bc3bb3170f1321683702204bbec8d837e4abfeadfaa20375f7b555b660c4eca68a10e05032bb854ba3edb20076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189fb3abcb20000040300473045022068c5e011dbe33edaa529912a31cccdb5c04b56086a3d0882ebe8c98788c6b03502210095ab77fdfad6ddd551745147568c044da4d379626667e37bb6440d870a346427
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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