clubmanager.me

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d0:5b:8c:66:41:de:81:f9:54:06:91:3f:e7:4b:99:43:ea was issued on by Let's Encrypt.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=clubmanager.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d0:5b:8c:66:41:de:81:f9:54:06:91:3f:e7:4b:99:43:ea
Serial Number (int): 332237278858037035497483745610429552477162
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c6:09:d2:de:f4:45:16:90:b6:ce:88:72:69:44:47:3a:c9:6f:54:1b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ed:36:5c:9c:26:7e:74:3f:6a:80:a5:9b:cb:15:2e:38:86:da:d1:c0
Fingerprint (sha256): 1d:47:97:5e:e5:c4:5d:f8:d6:67:0f:46:a0:2d:fd:d1:37:07:1b:3f:13:16:f2:f1:2d:01:85:54:46:d7:8c:75

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate clubmanager.me

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clubmanager.me

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afterguard.clubmanager.me
app.tisailing.org
bowtostern.clubmanager.me
clients-pinfirelabs.clubmanager.me
clients-pinfirestudios.clubmanager.me
clients.pinfirelabs.com
clients.pinfirestudios.com
clover.clubmanager.me
clubmanager.me
demo.clubmanager.me
events.hooferouting.org
events.hooferscubaclub.org
events.hoofersns.org
hoofers.clubmanager.me
lessons.hooferriding.org
lessons.hoofersailing.org
members.hoofermountaineering.org
members.hoofers.org
members.pi.theshop.build
members.sf.theshop.build
members.sj.theshop.build
members.theshop.build
nbss.clubmanager.me
npsc.clubmanager.me
ocsc-sandbox.clubmanager.me
ocsc.clubmanager.me
outdoor-uw.clubmanager.me
pi.theshop.clubmanager.me
pssi.clubmanager.me
register.bowtosternboating.com
register.tacomajrsail.org
registration.hooferyouth.org
registration.sailcalhoun.org
registration.sailmpls.org
reservations.pugetsoundsailing.com
reserve.sbsail.com
reserve.texassailing.com
rochesteryc.clubmanager.me
sailcalhoun.clubmanager.me
sailmpls.clubmanager.me
sailsi.clubmanager.me
sandbox-l.clubmanager.me
sandbox-s.clubmanager.me
sbsail.clubmanager.me
seasafaris.clubmanager.me
secure.hoofers.org
sf.theshop.clubmanager.me
sj.theshop.clubmanager.me
spyc.clubmanager.me
ssc.clubmanager.me
texas-sailing.clubmanager.me
theshop.clubmanager.me
tisc.clubmanager.me
tsa.clubmanager.me
tyc-youth.clubmanager.me
wisconsin-basecamp.clubmanager.me
yachtxp.clubmanager.me

Other certificates including the domain name clubmanager.me

(limited to 100 certificates)
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
www-source.pinfirelabs.com
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
staging.clubmanager.me
clubmanager.me
docs-source.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
clubmanager.me
clover.clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
www-source.pinfirelabs.com
staging.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
*.clubmanager.me
craft-dev.clubmanager.me
clubmanager.me
*.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
updates.clubmanager.me
clubmanager.me
events.hooferouting.org
clover.staging.clubmanager.me
clover.staging.clubmanager.me
clubmanager.me
utils.clubmanager.me
staging.clubmanager.me
*.clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clover.staging.clubmanager.me
clover.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
utils.clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
pinfirelabs.com

Certificate

The complete raw certificate details for clubmanager.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO8C3oB5xQ1m/Y3AJ1n8
SWMEUkRk9KqcJlT2m+IR0SZXZ9yrUCPFbMj7EKusKDOJQEpotgIT3G+IZREJL1eI
XAWW8LGej6Mi4OYiG3wEacRW1WHq99Q2JAuKciw1ekOYVq+wc0NZEVsjK1R6GBTU
uGZcFuXFaWO0u25ebzVEPcjapSwgz1xRlOWN4ZPjXZ0Qjl/yzEHzScY3KBPuLUOH
Kt4cIOpigkraBiiPWyIRPiMrrZ3mrvjrZJEN/K0cu/O54/SlZVeh1DBPPhH5h73p
3g0XDICXs2576W617/KKe9xq2acE73eRlvrAn/sOcr9Gy15zz4C6fHnHQ2aj2mzj
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332237278858037035497483745610429552477162
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-17 21:14:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-15 21:14:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clubmanager.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25870475032280804873278757868984386581717024448498341410073799229359446656658938989474080042951901066830009363628594912556243651875501843517445099592792889701977783965078659812646421365401801606680182326107886808629811085400516959903316791529474267136448996845707499150694514411018276203735973541284047426491758032657891664849499047281636305198669365619096239121672057317269782550579388502490237610128272668266517400282812758869697286263798987491049504206269493247902472051146182236948284948063970767209520145391191498886730914102897029150291902259314180559234624356011205454174543232725518560920860944191937718313901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c609d2def4451690b6ce88726944473ac96f541b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1469 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afterguard.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tisailing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowtostern.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients-pinfirelabs.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients-pinfirestudios.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.pinfirelabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.pinfirestudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clover.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hooferouting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hooferscubaclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hoofersns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoofers.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessons.hooferriding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessons.hoofersailing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.hoofermountaineering.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.hoofers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.pi.theshop.build'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.sf.theshop.build'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.sj.theshop.build'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.theshop.build'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbss.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npsc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocsc-sandbox.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocsc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outdoor-uw.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pi.theshop.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pssi.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.bowtosternboating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.tacomajrsail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.hooferyouth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.sailcalhoun.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.sailmpls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.pugetsoundsailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.sbsail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.texassailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochesteryc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailcalhoun.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailmpls.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailsi.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-l.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-s.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbsail.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seasafaris.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hoofers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.theshop.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sj.theshop.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spyc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texas-sailing.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theshop.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tisc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsa.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyc-youth.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wisconsin-basecamp.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yachtxp.clubmanager.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016723bd72a600000403004830460221008822f91134ba0f570cd751d638eb95dbac1bd1568ccf9f71eb6335b69bac65c3022100d6029ff6e99833b174b5073b8f40af057b5bfa273dc079124674bbcc5ffef20300760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016723bd74990000040300473045022100e09c61ab90376c417d97493a9d7e1def7d4873071a30866a02befa0b9e33d55702207ec6c767f1ec4d78a77494fc03e76cfe79d65fb99a6a8a0dabb08aae12c8128f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008d14e7f2a33c01843567abd4967ca5407e7cf0c626967b6623bb3825f245ea433417fc61a65bfbec1d0be87fcdf0c607e52ce29d762e0b577ef88517488b67ca0c3112253071f6a8174960bd744f7fd402a5bfb51811c8f9cc043cb326f74c88204c1195d652284daf8a75beac20eee879dccacc46c5dcfcfe295f668220b80fa5c4438083ca954c27dd1b81e1085489ade22d774215ab078bca0872cf574dcfba1770bbaf44e2d53f6a25f60bb48ef5909d41e79a2c74447e780045a9a7b8dcff6be31ee1fd442b1169b06ae40a4e88d3d4d8188cbaf2d9400092e0b790ff3f2e2e4d329edfd132709f0947b20d3977cb4fb440b5fd0c5a6d9df42b53fcb2be