acquia-sites.com

- Acquia Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0b:bb:42:2b:91:9b:22:39:0d:57:6d:a7:3b:a9:fe:3e was issued on by DigiCert Inc.

With 106 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Acquia Inc

Organization: Acquia Inc
State / Province: Massachusetts
Locality: Boston
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:bb:42:2b:91:9b:22:39:0d:57:6d:a7:3b:a9:fe:3e
Serial Number (int): 15593809557087788031113067384671960638
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 08:c7:51:9c:10:eb:c6:4f:3e:fe:04:23:aa:99:6d:e6:2b:89:8f:2f
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 14:e0:93:e7:14:0d:7d:f3:52:28:1d:e0:b8:73:2c:42:5a:05:e0:97
Fingerprint (sha256): 1a:67:49:89:b3:86:80:15:21:24:34:e2:50:20:5a:82:90:fa:51:4e:e2:6c:62:fd:db:6f:12:99:9a:2c:d5:54

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl

Check the revocation status for certificate acquia-sites.com

106

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acquia-sites.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acquia-sites.com
admin.todayonline.com
hoover.org
www.hoover.org
dev.niaaa.nih.gov
stage.niaaa.nih.gov
content.niaaa.nih.gov
dev.addictionresearch.nih.gov
stage.addictionresearch.nih.gov
content.addictionresearch.nih.gov
www.offers.neutrogena.com
offers.neutrogena.com
m.zyrtec.com
www.zyrtec.com
zyrtec.com
www.visine.com
visine.com
www.my-coach.com
my-coach.com
kossresource.com
staging.smhs.gwu.edu
dev.smhs.gwu.edu
fragomen.com
www.fragomen.com
insomniaceventsstg.prod.acquia-sites.com
insomniaceventsdev.prod.acquia-sites.com
nrcrampdev.prod.acquia-sites.com
nrcrampstg.prod.acquia-sites.com
www.sfmta.com
beta.sfmta.com
sfmta.com
editstaging.urban.org
www.pearlsprogramme.asia
hudkicare.onetouchdiabetes.co.in
auworkshop-pub-staging.autodesk.com
auworkshop-pub-int.autodesk.com
wbhstudiotoursstg.prod.acquia-sites.com
wbhstudiotoursdev.prod.acquia-sites.com
khudkicare.onetouchdiabetes.co.in
cityofirvine.org
dev.enercare.ca
stage.enercare.ca
bell.babson.edu
dev.bell.babson.edu
dev.facultyportal.babson.edu
dev.innovation.babson.edu
dev.studentportal.babson.edu
dev.webform.babson.edu
facultyportal.babson.edu
innovation.babson.edu
neasc.babson.edu
scholar.babson.edu
stage2.bell.babson.edu
stage2.facultyportal.babson.edu
stage2.innovation.babson.edu
stage2.studentportal.babson.edu
stage2.webform.babson.edu
stage.bell.babson.edu
stage.facultyportal.babson.edu
stage.innovation.babson.edu
stage.studentportal.babson.edu
stage.webform.babson.edu
studentportal.babson.edu
webform.babson.edu
dev.admit.babson.edu
stage.admit.babson.edu
stage2.admit.babson.edu
admit.babson.edu
www.tucolecta.com.uy
dev.smu.edu.sg
stg.smu.edu.sg
dev2.enercare.ca
stage2.enercare.ca
preview.enercare.ca
dev1.bookfuel.com
testing.jjconsumer.com
edit-testing.jjconsumer.com
www.adaptiveinsights.com
www.adaptiveinsights.jp
www.adaptiveinsights.co.uk
www.adaptiveinsights.com.au
www.adaptiveinsights.co.nz
aiastage2.prod.acquia-sites.com
dev.cws.sunrun.com
dev2.cws.sunrun.com
dev3.cws.sunrun.com
stg.cws.sunrun.com
web-dev.cradlepoint.com
web-qa.cradlepoint.com
cradlepoint.com
sesloc.org
dev.ramseycounty.us
stage.ramseycounty.us
dom.edu
brightview.com
test.destress.investments.voya.com
dev.destress.investments.voya.com
accept.destress.investments.voya.com
www.test.clarku.edu
stage-www.clarku.edu
net.nadex.com
web.nadex.com
dev.ramseynet.us
stage.ramseynet.us
graniteconstruction.com
www.graniteconstruction.com

Other certificates including the domain name acquia-sites.com

(limited to 100 certificates)
acquia-sites.com
acquia-sites.com
acquia-sites.com
datamedicaid.prod.acquia-sites.com
acquia-sites.com
staging.ensco.com
www-stage.anzacmemorial.nsw.gov.au
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
achievesdtcgjdnbrbp.devcloud.acquia-sites.com
mbrdev.prod.acquia-sites.com
www.stg.solocal.com
tplwebsitestg.prod.acquia-sites.com
raritanvalstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
batterseadev.prod.acquia-sites.com
aupairworld.prod.acquia-sites.com
www.dev.solocal.com
www.stg.solocal.com
premiereprep.com
acquia-sites.com
ee.dustindev.com
cloudapi.enterprise-g1.acquia-sites.com
batterseadev.prod.acquia-sites.com
stewardcommunity.prod.acquia-sites.com
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
planetpaymentprod.prod.acquia-sites.com
trocairestg.prod.acquia-sites.com
tsysitesdev.prod.acquia-sites.com
tplwebsitestg.prod.acquia-sites.com
acquia-sites.com
milgardstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
rrd8multidev.prod.acquia-sites.com
pnwdsstg.prod.acquia-sites.com
www.dev.solocal.com
acquia-sites.com
useastucc5.acquia.com
www.anzacmemorial.nsw.gov.au
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
newhousedev.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
firstnamesgrouptest.devcloud.acquia-sites.com
acquia-sites.com
jfkldev.prod.acquia-sites.com
acquia-sites.com
cloudapi.trex-prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
quickanddirtytipsdev.prod.acquia-sites.com
acquia-sites.com
stewardcommunity.prod.acquia-sites.com
acquia-sites.com
oitcomms.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
univadisstg.prod.acquia-sites.com
useastucc5.acquia.com
datacms.prod.acquia-sites.com
acquia-sites.com
tplwebsitedev.prod.acquia-sites.com
bmistg.prod.acquia-sites.com

Certificate

The complete raw certificate details for acquia-sites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15593809557087788031113067384671960638
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Boston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acquia Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acquia-sites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763392515893858219868673111177769146586714289937102997991725950487562058773120450028549936864039719882307782153186338229401909354294488188917288225744868624191288762254163698910650042730088910190789449332245990730448548084272820855307791223163136901465115777650226194900149803362294811195944834529573281471748736820322460064179914113563654116839933019159972537969142155866337354071031490520704735307357920287044312438668261775952353696490436240430045043903795787834366166402914730011279104284305824121265631041977235919377209640967220958941799917217629129472056582811415778290090188887928398962327655339224630402807015005397670687558662293114726315730950617862654015212167643663832087434764498110566787270422256181216308391369861518246079703133339400681240725775838453294756081679388408460343783265191772368767704403484200906452674309353520779305002780819076406666372575854896012182496246351187019941646359308541247020199043017143606747052202068150789985644148744755997263079751245520053072439255808958415841299404455896764847211221901218568033943265065168345744867039877842213213389725422727085952536280058011402460469988576156077846284254780809039983672719196312445596041835521534785504305673621823228033759401117860720377580032923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08c7519c10ebc64f3efe0423aa996de62b898f2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2512 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.todayonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoover.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.niaaa.nih.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.niaaa.nih.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.niaaa.nih.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.addictionresearch.nih.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.addictionresearch.nih.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.addictionresearch.nih.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offers.neutrogena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.neutrogena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.zyrtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zyrtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zyrtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-coach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-coach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kossresource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.smhs.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.smhs.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fragomen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fragomen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insomniaceventsstg.prod.acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insomniaceventsdev.prod.acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrcrampdev.prod.acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrcrampstg.prod.acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfmta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.sfmta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfmta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editstaging.urban.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pearlsprogramme.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hudkicare.onetouchdiabetes.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auworkshop-pub-staging.autodesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auworkshop-pub-int.autodesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbhstudiotoursstg.prod.acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbhstudiotoursdev.prod.acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khudkicare.onetouchdiabetes.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofirvine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.enercare.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.enercare.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bell.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bell.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.facultyportal.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.innovation.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.studentportal.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.webform.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facultyportal.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovation.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neasc.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholar.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2.bell.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2.facultyportal.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2.innovation.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2.studentportal.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2.webform.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.bell.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.facultyportal.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.innovation.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.studentportal.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.webform.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentportal.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webform.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.admit.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.admit.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2.admit.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admit.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tucolecta.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.smu.edu.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.smu.edu.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.enercare.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2.enercare.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.enercare.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.bookfuel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.jjconsumer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit-testing.jjconsumer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adaptiveinsights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adaptiveinsights.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adaptiveinsights.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adaptiveinsights.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adaptiveinsights.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiastage2.prod.acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cws.sunrun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.cws.sunrun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev3.cws.sunrun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.cws.sunrun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-dev.cradlepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-qa.cradlepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cradlepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sesloc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ramseycounty.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ramseycounty.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dom.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.destress.investments.voya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.destress.investments.voya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accept.destress.investments.voya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.clarku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-www.clarku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'net.nadex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.nadex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ramseynet.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ramseynet.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graniteconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graniteconstruction.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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