alldata.com

Issued by R3

About this certificate

This digital certificate with serial number 03:9d:67:fd:4e:1a:60:88:49:c9:e7:07:af:29:d0:79:0c:d3 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alldata.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9d:67:fd:4e:1a:60:88:49:c9:e7:07:af:29:d0:79:0c:d3
Serial Number (int): 314899415120656890983433301054090290728147
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e5:8e:d4:a3:9a:97:b2:d7:cf:56:74:2b:82:2e:31:61:14:e1:d7:64
Fingerprint (sha256): 19:aa:24:86:09:c6:b2:5d:a1:82:08:89:fe:f1:40:51:20:c3:96:85:d5:32:ae:31:c2:57:04:e7:7f:bd:6c:14

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate alldata.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alldata.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

161511-web1.vilcek.org
1ggens.morneaushepell.com
2.www.upenn.edu
2010.netimpact.org
2011.waterfrontoronto.ca
21.calrest.org
39.calrest.org
ab-csp.edu.help
abc.appcelerator.com
acadmintest.cuofco.org
act.americancouncils.org
act.mattek.com
adfs.shoneys.com
admin.mrc.org
admin.nacha.org
admin.naco.org
admin.operationhope.org
admin.rooomy.com
admin.sdzsafaripark.org
adminanimals.sandiegozoo.org
administration.unlv.edu
adminsvcs.unlv.edu
advertise.tu.org
afasmtp.actorsfund.org
agents.umbc.edu
aiq.adisa.org
alaskamastergardener.multidevcom.uaf.edu
alldata.com
allofusaz.uahs.arizona.edu
alpha1.americanancestors.org
alt.test.principal.com
amsoc6.as-coa.org
amyrice.religionnews.com
andersoncollection.stanford.edu
anniversaries.uahs.arizona.edu
api-staging.scout.org
app.familyexpectations.com
application-resource.parttime.carey.jhu.edu
apps.americancouncils.org
apps.mcny.org
apps2.societyforscience.org
aramark.maxonlift.com
archnet.archbalt.org
archydro.crwr.utexas.edu
ariel.ppld.org
arkofhope.crs.org
arrow.appcelerator.com
ascoa-awsdc.as-coa.org
asktico.lib.berkeley.edu
atv.law.nyu.edu
audit.sfsu.edu
augment.alaska.edu
autodiscoverla.actorsfund.org
avnetinnovationlab.engineering.asu.edu
awards.opcw.org
b.ns.christiancentury.org
b.programs.online.utica.edu
backend-dev.stargate.mgm.com
bandarnews.religionnews.com
banking-business-review.com
belkin.rutgers.edu
beta.skyandtelescope.org
bickertonportables.co.uk
bigidea.rutgers.edu
biopoliticaltimes.org
blog.ad.audubon.com
blog.brightfarms.com
blogs.earthjustice.org
bold.albion.edu
boxoffice.mcny.org
boztchividjian.religionnews.com
brainweek.dana.org
brassunion.com
brianpellot.religionnews.com
bso.ac.uk
cabana.online
canal9.com.ar
cornthins.com
datahero.com
eduhup.com
emetry.io
executionists.com
floridahospitalcancer.com
gmi.edu
hamiltonexhibition.com
kevinfaulconer.com
leeanatankersley.com
live-ipmb.pantheonsite.io
live-legacy-cms.pantheonsite.io
nestlebaby.in.th
nobleenergyinc.com
pacific.edu
thepointalehouse.com
wptblog.org

Other certificates including the domain name alldata.com

(limited to 100 certificates)
cars.beta.alldata.com
5670794235478016-fe4.pantheonsite.io
manageonline.alldata.com
alldata.com
academic.gsm.cornell.edu
billing.alldata.com
manageservices-beta.alldata.com
5700911208857600-fe3.pantheonsite.io
5670794235478016-fe4.pantheonsite.io
academic.gsm.cornell.edu
5670794235478016-fe4.pantheonsite.io
www.aamco.alldata.com
motor3k.alldata.com
*.alldata.com
oauth.alldata.com
manageonline.alldata.com
europe.alldata.com
5724160613416960-fe2.pantheonsite.io
alldata.com
5700911208857600-fe3.pantheonsite.io
5700911208857600-fe3.pantheonsite.io
5670794235478016-fe4.pantheonsite.io
manageservices-beta.alldata.com
5670794235478016-fe4.pantheonsite.io
support.alldata.com
oauth-beta.alldata.com
community.alldata.com
5700911208857600-fe3.pantheonsite.io
repairinfo.beta.alldata.com
5630239073894400-fe2.pantheonsite.io
5760443222065152-fe3.pantheonsite.io
5670794235478016-fe4.pantheonsite.io
orders.alldata.com
*.alldata.com
161511-web1.vilcek.org
academic.gsm.cornell.edu
5760443222065152-fe3.pantheonsite.io
*.alldata.com
*.alldata.com
161511-web1.vilcek.org
repairinfo.services.alldata.com
lof.alldata.com
5700911208857600-fe3.pantheonsite.io
*.alldata.com
5670794235478016-fe4.pantheonsite.io
5670794235478016-fe4.pantheonsite.io
adsupport.alldata.com
161511-web1.vilcek.org
my-beta.alldata.com
*.alldata.com
5760443222065152-fe3.pantheonsite.io
*.alldata.com
5670794235478016-fe4.pantheonsite.io
*.alldata.com
5700911208857600-fe3.pantheonsite.io
academic.gsm.cornell.edu
5700911208857600-fe3.pantheonsite.io
repair-beta.alldata.com
repairinfo.services.alldata.com
www.aamco.alldata.com
training.alldata.com
*.alldata.com
5724160613416960-fe2.pantheonsite.io
5670794235478016-fe4.pantheonsite.io
support.alldata.com
161511-web1.vilcek.org
app.alldata.com
repair.alldata.com
academic.gsm.cornell.edu
alldata.com
oauth.alldata.com
www.alldata.com
academic.gsm.cornell.edu
repair-beta.alldata.com
alldata.com
academic.gsm.cornell.edu
repairinfo.services.alldata.com
5760443222065152-fe3.pantheonsite.io
cars.services.alldata.com
5700911208857600-fe3.pantheonsite.io
*.alldata.com
5700911208857600-fe3.pantheonsite.io
repair.alldata.com
*.alldata.com
161511-web1.vilcek.org
adsupport.alldata.com
mol-sprintbeta.alldata.com
my-beta.alldata.com
5670794235478016-fe4.pantheonsite.io
5670794235478016-fe4.pantheonsite.io
5700911208857600-fe3.pantheonsite.io
my-beta.alldata.com
alldata.com
academic.gsm.cornell.edu
app.alldata.com
alldatasavings.alldata.com
5670794235478016-fe4.pantheonsite.io
*.alldata.com
5700911208857600-fe3.pantheonsite.io
repair.alldata.com

Certificate

The complete raw certificate details for alldata.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314899415120656890983433301054090290728147
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-21 04:23:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-19 04:23:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alldata.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2096 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '161511-web1.vilcek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1ggens.morneaushepell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2.www.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2010.netimpact.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2011.waterfrontoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '21.calrest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '39.calrest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ab-csp.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abc.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acadmintest.cuofco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.mattek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs.shoneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.naco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.operationhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rooomy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sdzsafaripark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminanimals.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'administration.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminsvcs.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertise.tu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afasmtp.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.umbc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq.adisa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaskamastergardener.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alldata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allofusaz.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha1.americanancestors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alt.test.principal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amsoc6.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amyrice.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andersoncollection.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anniversaries.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-staging.scout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.familyexpectations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'application-resource.parttime.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps2.societyforscience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aramark.maxonlift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archnet.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archydro.crwr.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ariel.ppld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkofhope.crs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrow.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascoa-awsdc.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asktico.lib.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atv.law.nyu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audit.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augment.alaska.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscoverla.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avnetinnovationlab.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awards.opcw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b.ns.christiancentury.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b.programs.online.utica.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend-dev.stargate.mgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandarnews.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banking-business-review.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belkin.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.skyandtelescope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bickertonportables.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigidea.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biopoliticaltimes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.ad.audubon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.brightfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bold.albion.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boztchividjian.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainweek.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brassunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brianpellot.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bso.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabana.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canal9.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornthins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datahero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduhup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emetry.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'executionists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floridahospitalcancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmi.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamiltonexhibition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kevinfaulconer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leeanatankersley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-ipmb.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-legacy-cms.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlebaby.in.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nobleenergyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepointalehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wptblog.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018498a3e7720000040300473045022100deb664f87a8d4a7c014b7b310b66904228274092649ef5e893fc03d2f8147b270220299030acf00b74864f3c2c6420692dc2324b0f295005bb06cb5a98e3908c60db007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018498a3e9460000040300463044022063845c9570c591484c67a7ad9639b90c9beb58436af16d36b6e031e81c92cda902202f242578030b050a9ebbeff7b237d7a099a16c61f5143fb8c799fc601950f473
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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