achieve.engineering.asu.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:55:0d:e3:ca:0f:ec:c3:46:d1:3a:43:cb:73:df:50:bb:e4 was issued on by Let's Encrypt.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=achieve.engineering.asu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:55:0d:e3:ca:0f:ec:c3:46:d1:3a:43:cb:73:df:50:bb:e4
Serial Number (int): 377391607628961284205731140281693987978212
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ea:79:c9:2f:43:95:33:86:3c:05:10:41:3e:c0:b7:85:12:ad:0d:82
Fingerprint (sha256): 1d:82:51:e0:3f:d1:04:10:05:39:cb:f5:ce:7f:92:88:f8:62:15:61:02:b3:7e:ef:ff:db:6f:6d:a9:37:69:a6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate achieve.engineering.asu.edu

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for achieve.engineering.asu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

achieve.engineering.asu.edu
admissions.kettering.edu
anniversaries.uahs.arizona.edu
appcamp.engineering.asu.edu
arch.utexas.edu
archive-mba.wharton.upenn.edu
asktico.lib.berkeley.edu
brand.purdue.edu
broadway.playhousesquare.org
campaign.ucsc.edu
chancellorsearch.ucsc.edu
cimes.csbs.csusb.edu
costume.library.cornell.edu
ctc.sfsu.edu
dev1.si.umich.edu
developerdev.moodysanalytics.com
dmats.spcs.stanford.edu
dmats.stanford.edu
eis.washington.edu
elearning.med.utoronto.ca
events-archive.ucsc.edu
exploringthecomplexity.ucdavis.edu
furiposters.engineering.asu.edu
geniustransitchallenge.ny.gov
heckerlab.arizona.edu
hello.engineering.asu.edu
info.extension.ucsb.edu
investors.mgmgrowthproperties.com
itcatalyst.sfsu.edu
jsat.ucdavis.edu
lambda.usc.edu
leap.ucdavis.edu
live-sas-strategic-plan.pantheon.sas.upenn.edu
live.ucdavis.edu
makinghistory.gwu.edu
missioncritical.wharton.upenn.edu
mtageniustransitchallenge.ny.gov
odee-pgmo.osu.edu
ordbc.arizona.edu
osr-ops-test01.colorado.edu
partnership.gse.upenn.edu
pctc.washington.edu
pmbasa.arizona.edu
polzlab.mit.edu
production.id.ucsb.edu
radsafe.berkeley.edu
regenerativemedicine.uahs.arizona.edu
rmp.rutgers.edu
scilsresx.rutgers.edu
smtp.asc.upenn.edu
stanfordsummersession.stanford.edu
stg-blog.www.msit.io
techdigest.sagepub.com
test.cam.cornell.edu
test.mae.cornell.edu
test.mse.cornell.edu
tl.wvu.edu
trans.berkeley.edu
transportplan.rutgers.edu
universityextension.ucdavis.edu
vpr.arizona.edu
webdev.colorado.edu
www.azspo.az.gov
www.brand.cce.cornell.edu
www.crwr.utexas.edu
www.docs.bigid.com
www.ee.udel.edu
www.elearning.med.utoronto.ca
www.esc.rutgers.edu
www.gs.utexas.edu
www.rb.az.gov
www.reich.chem.ucsb.edu
www.scl.ece.ucsb.edu
www.tbsi.berkeley.edu
www.universityextension.ucdavis.edu
www.wanprc.washington.edu
www2.ccny.cuny.edu
yelab.ucsf.edu

Other certificates including the domain name asu.edu

(limited to 100 certificates)
discoverylabs.asu.edu
5734743547052032-fe3.pantheonsite.io
5631131353350144-fe1.pantheonsite.io
5681777339269120-fe1.pantheonsite.io
5757715179634688-fe2.pantheonsite.io
5638059940904960-fe3.pantheonsite.io
cbs.asu.edu
tutortrac.asu.edu
test-web-lws.edu.help
speechandhearingasu.com
asupharos1.asu.edu
5186145897938944-fe4.pantheonsite.io
5769623379116032-fe2.pantheonsite.io
carpepm.almonds.com
tools.clas.asu.edu
5176288276905984-fe4.pantheonsite.io
sni.cloudflaressl.com
5658044692168704-fe3.pantheonsite.io
5648867420798976-fe4.pantheonsite.io
5757715179634688-fe2.pantheonsite.io
5633267831144448-fe1.pantheonsite.io
hyl-app-dev02.asurite.ad.asu.edu
5702666986455040-fe2.pantheonsite.io
5631986051842048-fe1.pantheonsite.io
5638059940904960-fe3.pantheonsite.io
5712536552865792-fe3.pantheonsite.io
5642906408845312-fe3.pantheonsite.io
moodle.asu.edu
it.uahs.arizona.edu
5691878833913856-fe3.pantheonsite.io
osha.asu.edu
5186145897938944-fe4.pantheonsite.io
cen.engineering.asu.edu
5769720821186560-fe3.pantheonsite.io
5689792285114368-fe2.pantheonsite.io
5712536552865792-fe3.pantheonsite.io
staffcouncil.asu.edu
5702351037923328-fe2.pantheonsite.io
5663284820705280-fe3.pantheonsite.io
5702666986455040-fe2.pantheonsite.io
sni.cloudflaressl.com
5638059940904960-fe3.pantheonsite.io
sni.cloudflaressl.com
morrisoninstitute.asu.edu
5663284820705280-fe3.pantheonsite.io
5691420614590464-fe3.pantheonsite.io
5709068098338816-fe3.pantheonsite.io
nartc.fcm.arizona.edu
5752142325350400-fe1.pantheonsite.io
5730602795925504-fe1.pantheonsite.io
5730774057746432-fe4.pantheonsite.io
transportation.asu.edu
5763210187636736-fe2.pantheonsite.io
5633267831144448-fe1.pantheonsite.io
sfunder8cert.net
5707324073181184-fe2.pantheonsite.io
*.asu.edu
dlists.asu.edu
webhost80.asu.edu
5693341270278144-fe4.pantheonsite.io
5658962204557312-fe4.pantheonsite.io
5691878833913856-fe3.pantheonsite.io
5736907271045120-fe1.pantheonsite.io
worksite.asu.edu
dooraccess.biodesign.asu.edu
5691878833913856-fe3.pantheonsite.io
sni.cloudflaressl.com
5679846214598656-fe1.pantheonsite.io
5763210187636736-fe2.pantheonsite.io
5766466041282560-fe4.pantheonsite.io
5659822271758336-fe3.pantheonsite.io
dept-sql-n2.asurite.ad.asu.edu
5681904711892992-fe1.pantheonsite.io
jewishstudies.asu.edu
5769623379116032-fe2.pantheonsite.io
5689792285114368-fe2.pantheonsite.io
5736907271045120-fe1.pantheonsite.io
uconnectlabs.com
drupal.asu.edu
5709068098338816-fe3.pantheonsite.io
5731346630574080-fe3.pantheonsite.io
aria.asu.edu
5728757302165504-fe2.pantheonsite.io
5696381570252800-fe2.pantheonsite.io
5721489412194304-fe1.pantheonsite.io
5663284820705280-fe3.pantheonsite.io
banking-business-review.com
sni.cloudflaressl.com
cdn-test.battlefields.org
5734743547052032-fe3.pantheonsite.io
5683582030839808-fe1.pantheonsite.io
cholla.rc.asu.edu
sni.cloudflaressl.com
cad.asu.edu
5727517264576512-fe4.pantheonsite.io
thunderbird.asu.edu
5633267831144448-fe1.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
osha.asu.edu
fultonapps1.asu.edu

Certificate

The complete raw certificate details for achieve.engineering.asu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377391607628961284205731140281693987978212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-13 20:51:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-11 20:51:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'achieve.engineering.asu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1898 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achieve.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admissions.kettering.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anniversaries.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appcamp.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arch.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive-mba.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asktico.lib.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadway.playhousesquare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chancellorsearch.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimes.csbs.csusb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costume.library.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctc.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.si.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developerdev.moodysanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.spcs.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eis.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearning.med.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events-archive.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploringthecomplexity.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furiposters.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniustransitchallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heckerlab.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.extension.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.mgmgrowthproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcatalyst.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsat.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambda.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leap.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-sas-strategic-plan.pantheon.sas.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missioncritical.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtageniustransitchallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odee-pgmo.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordbc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osr-ops-test01.colorado.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnership.gse.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pctc.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmbasa.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polzlab.mit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.id.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsafe.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regenerativemedicine.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmp.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scilsresx.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.asc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanfordsummersession.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-blog.www.msit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techdigest.sagepub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tl.wvu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trans.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transportplan.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universityextension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpr.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdev.colorado.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azspo.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brand.cce.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crwr.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docs.bigid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ee.udel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elearning.med.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esc.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gs.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rb.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reich.chem.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scl.ece.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tbsi.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universityextension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wanprc.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yelab.ucsf.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001815f0d107200000403004730450221009d47e4c36ce4b7124f3efd64471757077f85d506bdf627533cd0b7858817d2e702204923665cc947c9ff93acbcec771c2e29b033efbc706c450e4ce84ee444c7ac260075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001815f0d126300000403004630440220395c8d3e2faa483087a57cd3a57ea542a234e78ed2e13496fef1bebbc651374a0220779c347a0a11442f4a8fdf84cdbed01bd9e013937746807ae5e226209840c3cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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