stage.onlineeducation.psu.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:a1:f8:f1:41:18:d0:8f:d6:6b:06:b5:41:b7:30:ad:f9:cf was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stage.onlineeducation.psu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a1:f8:f1:41:18:d0:8f:d6:6b:06:b5:41:b7:30:ad:f9:cf
Serial Number (int): 403565506008132292142734208447074385394127
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 04:44:6a:c8:a3:19:d5:b1:4a:73:7c:58:7f:b7:f5:6c:39:01:b2:62
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:f8:4d:56:7e:ab:f5:16:42:6d:4d:84:ee:e5:66:2c:24:51:4a:98
Fingerprint (sha256): 1c:2a:13:69:3c:28:26:40:d6:87:50:25:40:e6:7c:86:d6:8b:9a:ed:dc:04:27:cf:71:67:9e:6c:05:c9:ad:f2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stage.onlineeducation.psu.edu

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stage.onlineeducation.psu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stage.onlineeducation.psu.edu
staging-na.altran.com
staging.freedomworks.org
stanfordsummersession.stanford.edu
states.drugpolicy.org
static5.bisparks.org
stfincrease.unlv.edu
store.actorsfund.org
summercollegeacademy.stanford.edu
support.cci.org
support.doctorswithoutborders.org
sv3.presidio.edu
swfwmd.state.fl.us
system.catholicreview.org
system.religionnews.com
t.wholegrainscouncil.org
tango.franklin.uga.edu
technoculturalstudies.ucdavis.edu
techtransfer.arizona.edu
test-web-lws.edu.help
test.aep.cornell.edu
test.cam.cornell.edu
test.care.org
test.cee.cornell.edu
test.cochise.az.gov
test.ece.cornell.edu
test.efc.ny.gov
test.ethics3.pantheon.berkeley.edu
test.mae.cornell.edu
test.makinghistory.gwu.edu
test.mse.cornell.edu
test.ocio.osu.edu
test.radcliffe.edu
testb.test.uis.georgetown.edu
testdomain3.uis.georgetown.edu
testi.dev.cms1.asa.uw.edu
testsite.our.dev.cms2.asa.uw.edu
the-fourth.cca.edu
tism.msu.edu
tl.wvu.edu
townofdiscoverybay.ca.gov
townsendlab.berkeley.edu
transitions.metrotech.edu
trustsite.ethics3.pantheon.berkeley.edu
tst.trust.webdev.wustl.edu
uat-test.worldvision.org
ucomm-sites-dev.stanford.edu
ugrad.eller.web.arizona.edu
ui.connorsstate.edu
united.dev.cms1.asa.uw.edu
unskippable.crs.org
updates.cjei.cornell.edu
updates.cpra.cornell.edu
vaccine.mcny.org
vibrava.rutgers.edu
viewfinder.pamm.org
virtual2.unlv.edu
vmusa.corpny.restorationplaza.org
vpr.arizona.edu
wanprc.washington.edu
wasington.dev.cms1.asa.uw.edu
web.commerce.virginia.edu
web.stjohns.edu.help
web1.mcny.org
webdev.colorado.edu
website.wells.edu
webtest.tsu.edu
winter.arizona.edu
wireless.unlv.edu
wp.americancouncils.org
ww.as-coa.org
www-dev.gatewaycc.edu
www-dev.southmountaincc.edu
www.adobe.arizona.edu
www.aggiesvote.ucdavis.edu
www.aggievote.ucdavis.edu
www.alumni.dartmouth.edu
www.alumni.providence.edu
www.archydro.crwr.utexas.edu
www.asianstudies.uci.edu
www.asla.ced.berkeley.edu
www.astro.berkeley.edu
www.aws.ctd.northwestern.edu
www.azcc.arizona.edu
www.azmex.arizona.edu
www.belonging.berkeley.edu
www.bff.uga.edu
www.blogs.earthjustice.org
www.cas.msu.edu
www.chronicles.franklin.uga.edu
www.cie.ucdavis.edu
www.comartsci.msu.edu
www.comdis.msu.edu
www.comm.msu.edu
www.cookingoncampus.arizona.edu
www.crwr.utexas.edu
www.cybersecurity.umass.edu
www.datahero.com
www.dev.netimpact.org
www.diplomacy.state.gov

Other certificates including the domain name psu.edu

(limited to 100 certificates)
cds4.cvent.com
pennstatehealthnews.org
nemesis.vmhost.psu.edu
apply.psu.edu
d5-gogreenfront.ddar.psu.edu
vpfa.psu.edu
5693703389708288-fe3.pantheonsite.io
crmcn-prd-db.windom.outreach.psu.edu
apps.opp.psu.edu
prod-web10.lionpath.psu.edu
idashboard.hbg.psu.edu
svrp.psu.edu
www.causeweb.org
harrelllibcal.library.psu.edu
carpepm.almonds.com
webfiles.psu.edu
harrell.library.psu.edu
fandb.psu.edu
coaction.psu.edu
us.prod.campusgroups.com
qaauth.libraries.psu.edu
online.ist.psu.edu
morph-331.vmhost.psu.edu
angelshibaccept.ais.psu.edu
schoolresources.militaryfamilies.psu.edu
hrservdc.ohrrider.psu.edu
ssc1.wpsu.psu.edu
watchdog.vmhost.psu.edu
mkt-prod-db.windom.outreach.psu.edu
scholarsphere-qa.dlt.psu.edu
secure.smeal.psu.edu
collegian.psu.edu
www.ems.psu.edu
www.solutions2wxrisk.psu.edu
ucdc.edu
methodology.psu.edu
us.prod.campusgroups.com
ezaccess.libraries.psu.edu
usegalaxy.org
apps.tlt.psu.edu
alumni.libraries.psu.edu
exchange.ag.psu.edu
nartc.fcm.arizona.edu
egsc.psu.edu
calendar.sdzsafaripark.org
grafana.ais.psu.edu
artedu.vmhost.psu.edu
com-ce.vmhost.psu.edu
www.engr.psu.edu
webdev.research.psu.edu
mrsec.psu.edu
isserv83.psuas.psu.edu
nrotc.psu.edu
www.bookrequest.psu.edu
ocaltest.aset.psu.edu
courses.schoolresources.militaryfamilies.psu.edu
5693703389708288-fe3.pantheonsite.io
openid.et-test.psu.edu
f1adp-smartpark.ad.psu.edu
current.it.psu.edu
cas-cp-01.ag.psu.edu
inclusivity.psu.edu
vivid.cse.psu.edu
morgancenter.psu.edu
www.vmhost.psu.edu
www.studentloans.psu.edu
cds4.cvent.com
math.science.psu.edu
uconnectlabs.com
newkensington.psu.edu
chat.pshs.psu.edu
cpy-web1.lionpath.psu.edu
campusmap.psu.edu
www.opia.psu.edu
science.aws.science.psu.edu
genuinerisk.bmb.psu.edu
delta.csec-cra.psu.edu
cdn-test.battlefields.org
psualert-test.iam.psu.edu
e8-pnc-sep.ad.psu.edu
staging.aws.science.psu.edu
test.eis.uw.edu
dev.e-education.psu.edu
admissions.med.psu.edu
etda-explore-prod.libraries.psu.edu
secure.wpsu.psu.edu
www2.ems.psu.edu
admin.hhdev.psu.edu
citeak.multidevcom.uaf.edu
newton.vmhost.psu.edu
5693703389708288-fe3.pantheonsite.io
www.design-engineering.princeton.edu
latinocaucus.psu.edu
jupyterhub.ist.psu.edu
uconnectlabs.com
thrive.psu.edu
admin.odiapp-d01.lionpath.psu.edu
richc.et-test.psu.edu
qa.libraries.psu.edu
elections.psu.edu

Certificate

The complete raw certificate details for stage.onlineeducation.psu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw46iRMF7hwNtVI+uKl5U
F0CD5U3UkQMeBF8svfU9dGopQU40Ing2QVq1B+BFMG1Mn7ICzhEdYaQd/8z2o4yC
SvEOruHHbvRx9j8NrkB2VDdThoomFKEa0Ycr+N7Jt9BiGuqfFFcgkf3J61GgtdOf
eb3u1E1vLfFD14HJmJGlDtvFwp7KtZmSuKnUDvttZApeghzlw1S+QrS7sZo5epN5
As25V4MVnW5dTJFTfmhnbB9vkhJDh+O6DeLYszX0dSxVrsGI66gIDvk8vwZ1a2is
lILGQ2WDC/2oWV2R+PvWHZuUKqzLGtROWGuvZLR0QziNDryF+cVGICsOtMyOuvv4
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403565506008132292142734208447074385394127
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-22 11:13:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-22 11:13:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage.onlineeducation.psu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24686804846986700463286235473113579310640311389133520587690101062602581528438869452339616892952701902849061179936484875175962958584343852540185544183047237885328788321992471394861784671407872629842251491403749912828485536459849583589245555154424957554500881276697578384568150008763221433348736210875490343848174039032910683409070497266386346837523561884554602537558352214849828580677730541219147370984863199779155273255284942666036956568962165193514919553059246300356407560953783348314569168119667241859434381348711752591025577632034019588909291610597210916265772008296336673389410930207470033159467095714263857887333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04446ac8a319d5b14a737c587fb7f56c3901b262
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2438 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-na.altran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.freedomworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanfordsummersession.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'states.drugpolicy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static5.bisparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfincrease.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summercollegeacademy.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv3.presidio.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swfwmd.state.fl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'system.catholicreview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'system.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.wholegrainscouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tango.franklin.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technoculturalstudies.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techtransfer.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-web-lws.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.care.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cee.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cochise.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ece.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.efc.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ethics3.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ocio.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.radcliffe.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testb.test.uis.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testdomain3.uis.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testi.dev.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testsite.our.dev.cms2.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-fourth.cca.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tism.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tl.wvu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townofdiscoverybay.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townsendlab.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transitions.metrotech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustsite.ethics3.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.trust.webdev.wustl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-test.worldvision.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucomm-sites-dev.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugrad.eller.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ui.connorsstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'united.dev.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unskippable.crs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.cjei.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.cpra.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccine.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vibrava.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewfinder.pamm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtual2.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmusa.corpny.restorationplaza.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpr.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanprc.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wasington.dev.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.commerce.virginia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.stjohns.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web1.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdev.colorado.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'website.wells.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtest.tsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winter.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wireless.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.gatewaycc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.southmountaincc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adobe.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aggiesvote.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aggievote.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.dartmouth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.providence.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archydro.crwr.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asianstudies.uci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asla.ced.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astro.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aws.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azcc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azmex.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belonging.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bff.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blogs.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cas.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chronicles.franklin.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cie.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comartsci.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comdis.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comm.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookingoncampus.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crwr.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cybersecurity.umass.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datahero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.netimpact.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diplomacy.state.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018539c066210000040300473045022100a5a5812f795f44204f2186125d1fa4453b2f7e6dda44a2980998f62bd29c071402204e11c6a8ecc3ab433e66bb7d3ee546271049dff36f019040b275c6c436323047007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018539c0681a0000040300483046022100f576cbd95b377baeda23dfef6435bc116affeeed15c8f2fde7106428404d29260221009a7dced227e23ea1a7f8345ba338e2629d147867d59a8625a10dce7b84d1e86d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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