live.ucdavis.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:02:c2:0d:c1:5f:42:dd:2d:4d:c3:ce:66:45:74:c0:25:b0 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=live.ucdavis.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:02:c2:0d:c1:5f:42:dd:2d:4d:c3:ce:66:45:74:c0:25:b0
Serial Number (int): 262275364182216473839723805039338574587312
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 04:44:6a:c8:a3:19:d5:b1:4a:73:7c:58:7f:b7:f5:6c:39:01:b2:62
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f6:3e:fb:68:50:2e:3b:49:97:bf:be:3d:38:69:9f:07:c9:42:99:c3
Fingerprint (sha256): 1b:8c:3a:4c:f3:81:33:3f:e4:80:15:18:02:6b:98:9a:0f:a8:e2:af:45:73:11:e2:b5:bc:b0:9e:5a:19:01:01

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate live.ucdavis.edu

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for live.ucdavis.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

live.ucdavis.edu
lp.programs.carey.jhu.edu.help
m.ajc.org
m.qsrmagazine.com
m.religionnews.com
m.voiceofsandiego.org
magazine.merrimack.edu
mailams.ustelecom.org
makinghistory.gwu.edu
marketing.magicsoftware.com
marketingprojects.maryville.edu
mediaroom.livestrong.org
memberauth.audiology.org
microsites.globalwaters.org
mobile.ajc.org
mobilize.medika.life
msa2016.berkeley.edu
mtageniustransitchallenge.ny.gov
multidev1.gc.cuny.edu
nacopn3.naco.org
nartc.fcm.arizona.edu
nartechedge.nar.realtor
news.catholicschoolsbq.org
news.religionnews.com
newsite.as-coa.org
newsite.dev.cms1.asa.uw.edu
next.warnerpacific.edu
noticias.lared.cl
nrrss.ced.berkeley.edu
null.actorsfund.org
nyild.unionderm.com
odl.rutgers.edu
oksy.fronterasdesk.org
old.gistnetwork.org
oldsite.itu.edu
om.sterling.edu
online.foodsafety.msu.edu
opportunity.michiganfoundations.org
origin-dev-gcms.absolut.com
our2.test.cms1.asa.uw.edu
partners.starleaf.com
parttime.carey.jhu.edu
pattaya.dev.cms1.asa.uw.edu
pcp.sonoranucedd.fcm.arizona.edu
personalfinance.multidevcom.uaf.edu
pharmacy.ss.pacific.edu
pianolive.americamagazine.org
pophealth.uahs.arizona.edu
post-wp.religionnews.com
powertest.ctd.northwestern.edu
ppd-staging.sfsu.edu
ppr.erdf.appcelerator.com
pragmatic.ufc.com
preview.dfa.cornell.edu
prod-www.chop.edu
programs.alvernia.edu
programs.carey.jhu.edu
projectshare.sfsu.edu
ps-pantheon.umdearborn.edu
psp.sandiegozoo.org
pubsrv.eforms.asu.edu
qa.californiasciencecenter.ca.gov
querybuilder.appcelerator.com
racismharmshealth.berkeley.edu
radiology.virginia.edu
radsafe.berkeley.edu
rc.library.osu.edu
recovery-gse.berkeley.edu
redesignhealthcare.mclaren.org
redirects.policy.cornell.edu
regenerativemedicine.uahs.arizona.edu
religion.berkeley.edu
requestgem.business.ucdenver.edu
resx.usc.edu
reweb.archbalt.org
rgd2020.rutgers.edu
rheumatology.utoronto.ca
rmp.rutgers.edu
rntobsnonlineprograms.adu.edu
rpgp.berkeley.edu
rstinstruments.rstinstruments.com
rstinstrumentsinfo.rstinstruments.com
ruby-staging.vilcek.org
sbobet.ufc.com
sbobet88.ufc.com
scilsresx.rutgers.edu
sdgs-staging.scout.org
secure.tu.org
servicelearning.csustan.edu
sexgenderlab.human.cornell.edu
slot.ufc.com
smagent.ctd.northwestern.edu
smartdigitalphotography.multidevcom.uaf.edu
smtp.commonsensemedia.org
social.davidson.edu
sore.actorsfund.org
sourceu.warnerpacific.edu
ssa.blogs.govdelivery.com
stage.onlineeducation.psu.edu
staging-na.altran.com

Other certificates including the domain name ucdavis.edu

(limited to 100 certificates)
mytravel-apps.ucdavis.edu
health-stage.ucdavis.edu
bml.ucdavis.edu
cwec.ucdavis.edu
renfe.ucdavis.edu
test-web-lws.edu.help
payweb-dev.ucdavis.edu
axiomepm.ucdmc.ucdavis.edu
status.acquia.com
saintly.zeck.net
5719238044024832-fe2.pantheonsite.io
carpepm.almonds.com
developers.dss.ucdavis.edu
us.prod.campusgroups.com
bluefoxstatus.com
secure.vetmed.ucdavis.edu
staging.gifford.ucdavis.edu
numbernine.ucdavis.edu
it.uahs.arizona.edu
5719238044024832-fe2.pantheonsite.io
status.itsnationwide.com
org.ucdavis.edu
wcec.ucdavis.edu
breeze.ucdavis.edu
5733679603122176-fe4.pantheonsite.io
ucdc.edu
dev.cas.ucdavis.edu
status.takemepay.com
5644101080842240-fe2.pantheonsite.io
mobile.ucdavis.edu
5655869022797824-fe2.pantheonsite.io
5648161435549696-fe2.pantheonsite.io
smtp.lib.ucdavis.edu
chertok.physics.ucdavis.edu
ais.ucdavis.edu
5648161435549696-fe2.pantheonsite.io
dual.ucdavis.edu
listings.ucdavis.edu
csiflabs.cs.ucdavis.edu
vidi.cs.ucdavis.edu
www.superfund.ucdavis.edu
*.gsm.ucdavis.edu
cmsi.ucdavis.edu
cntrics.ucdavis.edu
adxstatus.com
linlab.ucdavis.edu
igg.ucdavis.edu
davt-0703-x3-a.ucdmc.ucdavis.edu
5727950116749312-fe4.pantheonsite.io
5756292874371072-fe1.pantheonsite.io
tle.ucdavis.edu
pczt-win-lbk-a1.primate.ucdavis.edu
psa.ucdavis.edu
anthromuseum.ucdavis.edu
5655869022797824-fe2.pantheonsite.io
asucd.ucdavis.edu
vpn.larry.ucdavis.edu
virtuallab.ucdavis.edu
5756292874371072-fe1.pantheonsite.io
scilhsapp01.ucdmc.ucdavis.edu
ces.ucdavis.edu
sfunder9cert.net
streetfilms.org
banner-api.gs.ucdavis.edu
stata.ucdavis.edu
horus.ucdavis.edu
gawsmith.ucdavis.edu
sfunder9cert.net
ceprod.ucdmc.ucdavis.edu
scdev03.ucdavis.edu
tls.automattic.com
banking-business-review.com
5747976207073280-fe2.pantheonsite.io
ionenterprise.ucdavis.edu
forensicscience.ucdavis.edu
cdn-test.battlefields.org
orcid.library.ucdavis.edu
virchow.ucdavis.edu
test.eis.uw.edu
pioneeringpunjabis.ucdavis.edu
linlab.ucdavis.edu
5742636757417984-fe1.pantheonsite.io
cnprc.ucdavis.edu
gap.ucdavis.edu
support.ucdavis.edu
citeak.multidevcom.uaf.edu
www.design-engineering.princeton.edu
bob.cs.ucdavis.edu
placemaking.ucdavis.edu
aphid.ucdavis.edu
securedns.planmygift.org
5699257587728384-fe4.pantheonsite.io
messenger.dss.ucdavis.edu
moraleslab.ucdavis.edu
eu-status.walkme.com
5666083260334080-fe3.pantheonsite.io
wiki.cse.ucdavis.edu
sapep.api.cloud.ucdavis.edu
5666083260334080-fe3.pantheonsite.io
pb2.extensiononline.ucdavis.edu

Certificate

The complete raw certificate details for live.ucdavis.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw46iRMF7hwNtVI+uKl5U
F0CD5U3UkQMeBF8svfU9dGopQU40Ing2QVq1B+BFMG1Mn7ICzhEdYaQd/8z2o4yC
SvEOruHHbvRx9j8NrkB2VDdThoomFKEa0Ycr+N7Jt9BiGuqfFFcgkf3J61GgtdOf
eb3u1E1vLfFD14HJmJGlDtvFwp7KtZmSuKnUDvttZApeghzlw1S+QrS7sZo5epN5
As25V4MVnW5dTJFTfmhnbB9vkhJDh+O6DeLYszX0dSxVrsGI66gIDvk8vwZ1a2is
lILGQ2WDC/2oWV2R+PvWHZuUKqzLGtROWGuvZLR0QziNDryF+cVGICsOtMyOuvv4
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262275364182216473839723805039338574587312
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-26 13:30:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-26 13:30:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'live.ucdavis.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24686804846986700463286235473113579310640311389133520587690101062602581528438869452339616892952701902849061179936484875175962958584343852540185544183047237885328788321992471394861784671407872629842251491403749912828485536459849583589245555154424957554500881276697578384568150008763221433348736210875490343848174039032910683409070497266386346837523561884554602537558352214849828580677730541219147370984863199779155273255284942666036956568962165193514919553059246300356407560953783348314569168119667241859434381348711752591025577632034019588909291610597210916265772008296336673389410930207470033159467095714263857887333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04446ac8a319d5b14a737c587fb7f56c3901b262
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2510 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.programs.carey.jhu.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ajc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.qsrmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.voiceofsandiego.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.merrimack.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailams.ustelecom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.magicsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingprojects.maryville.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaroom.livestrong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memberauth.audiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsites.globalwaters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.ajc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilize.medika.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msa2016.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtageniustransitchallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multidev1.gc.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nacopn3.naco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartechedge.nar.realtor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.catholicschoolsbq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsite.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsite.dev.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.warnerpacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noticias.lared.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrrss.ced.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'null.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyild.unionderm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odl.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oksy.fronterasdesk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.gistnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldsite.itu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'om.sterling.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.foodsafety.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opportunity.michiganfoundations.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-dev-gcms.absolut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'our2.test.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.starleaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parttime.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pattaya.dev.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcp.sonoranucedd.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalfinance.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacy.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianolive.americamagazine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pophealth.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'post-wp.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powertest.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppd-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppr.erdf.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pragmatic.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.dfa.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-www.chop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programs.alvernia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programs.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectshare.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-pantheon.umdearborn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psp.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubsrv.eforms.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.californiasciencecenter.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'querybuilder.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racismharmshealth.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiology.virginia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsafe.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.library.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recovery-gse.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redesignhealthcare.mclaren.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirects.policy.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regenerativemedicine.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religion.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'requestgem.business.ucdenver.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reweb.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgd2020.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmp.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rntobsnonlineprograms.adu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpgp.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstruments.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstrumentsinfo.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruby-staging.vilcek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbobet.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbobet88.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scilsresx.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdgs-staging.scout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicelearning.csustan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexgenderlab.human.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smagent.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartdigitalphotography.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.commonsensemedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.davidson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sore.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourceu.warnerpacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssa.blogs.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-na.altran.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001854ed79fd70000040300463044022060762e1b556f6822902b46aab4143448e82cc225aa7eee046701a7cae64b8bae02204399e1ee86644292801bccca30f35de4a9994ae3fc9e02f397e1f0de68bc1007007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001854ed79fd70000040300473045022100a0d0f0cdc5f2f4007b351bb22aac4c4990dde3c27b7ca91bb2ebfd7afbb45f4002202427925894ce079decdbb759ab860f1b1a561336521e275fafc7df8748675c67
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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