5699866936213504-fe4.pantheonsite.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:95:e1:94:eb:8a:f8:45:3f:e2:0c:d4:63:a8:71:6c:1f:78 was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=5699866936213504-fe4.pantheonsite.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:e1:94:eb:8a:f8:45:3f:e2:0c:d4:63:a8:71:6c:1f:78
Serial Number (int): 312338780002863819506914146373765803286392
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:94:73:60:6e:38:83:d3:b7:ab:c0:e8:ee:20:18:12:3c:90:82:1e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d0:7b:37:9d:f8:4b:b8:3e:63:2e:98:72:c0:aa:df:b9:9b:74:6e:54
Fingerprint (sha256): 1d:c8:55:98:6c:83:bc:43:74:b1:a7:10:93:c7:12:c5:27:ee:f5:39:37:33:52:aa:d3:1b:a3:5d:40:e8:46:53

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 5699866936213504-fe4.pantheonsite.io

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 5699866936213504-fe4.pantheonsite.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

5699866936213504-fe4.pantheonsite.io
accounting.sfsu.edu
admissions.newark.rutgers.edu
advising-staging.sfsu.edu
advising.sfsu.edu
appel.weill.cornell.edu
asiapacificinternetgroup.com
beechtreees.fcps.edu
biotechmba.sfsu.edu
cn.chinamedicalboard.org
coalliance.org
cob.sfsu.edu
cob6.sfsu.edu
craigdamosconsulting.com
ctfd-staging.sfsu.edu
dev.ahead-penn.org
ds.sfsu.edu
economics.sfsu.edu
education.crs.org
elmhurst.edu
emba.sfsu.edu
envs-staging.sfsu.edu
erp.sfsu.edu
finance.sfsu.edu
gbp.cob.sfsu.edu
gbp.sfsu.edu
geneticmedicine.weillcornell.org
gunstones.fcps.edu
hartenergy.com
hcare.stonybrook.edu
healthmba.sfsu.edu
hospitality.sfsu.edu
hospitalitymba.sfsu.edu
htm.sfsu.edu
ibus.sfsu.edu
is.sfsu.edu
labor-studies.sfsu.edu
leonlevy.org
mainstreetnd.com
management.sfsu.edu
marketing.sfsu.edu
mba.sfsu.edu
mbamib.sfsu.edu
morrison-staging.sfsu.edu
mpa.sfsu.edu
msa.sfsu.edu
new.asiapacificinternetgroup.com
nicemba.sfsu.edu
ownershipnj.rutgers.edu
parkervoiceinstitute.com
president.sfsu.edu
psychology.sfsu.edu
sap.sfsu.edu
sbmedwiki.com
seanparkervoiceinstitute.com
seapapers.library.cornell.edu
sfstatemba.sfsu.edu
sustainablemba.sfsu.edu
test.ahead-penn.org
test.duarte.com
untracht.com
untracht.info
untracht.net
untracht.org
vividattheyates.com
voice.weill.cornell.edu
voice.weillcornell.org
www.admissions.newark.rutgers.edu
www.aesthetic-solutions.com
www.airforce-technology.com
www.asiapacificinternetgroup.com
www.carrolltonutilities.com
www.coalliance.org
www.education.crs.org
www.elmhurst.edu
www.emba.sfsu.edu
www.endfistula.org
www.hcare.stonybrook.edu
www.mba.sfsu.edu
www.mbamib.sfsu.edu
www.mortgageceo.ca
www.msa.sfsu.edu
www.nicemba.sfsu.edu
www.offshore-technology.com
www.sbmedwiki.com
www.sustainablemba.sfsu.edu
www.untracht.com
www.untracht.info
www.untracht.net
www.untracht.org
www.vividattheyates.com

Other certificates including the domain name 5699866936213504-fe4.pantheonsite.io

(limited to 100 certificates)
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io
5699866936213504-fe4.pantheonsite.io

Certificate

The complete raw certificate details for 5699866936213504-fe4.pantheonsite.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA272cFNQ+5Sp7MSuDY2Th
XsDIwYqsVxNCkpa1vPkwsqD21+Se4M2PM8te7pxlH1OWJKWa0El1ydLCxK8ZL8mc
bU0ZCS4C8ec5bVISYi/u3S5gXL05YAdVE0Pk3GFOJrXPOXdY3tzVhbibSmnLzJ5W
/yVNw5s0tiMQlPpsoLYS5EBszhucTX9i6Z0oBtjsO6Ak9wPhvTJj7Y8pQQn5dRl/
QhKmnotF8ZqffLbMy2/acwCAbI51ewOofR12LkUtsF8zqjixoA3X0zf4icFPBAHp
18Awk/YnHkC4t25sYWziyiq+3cvn9mjjntlCGWbBVq+APee1wxK9voDQNgrLD0Bi
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312338780002863819506914146373765803286392
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-02 12:35:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-31 12:35:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5699866936213504-fe4.pantheonsite.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27739688811893269036016379549165623345384304716432411784997726975904282396557244944884554656982237379757036775920578306420085292108863135456109976823504130306720002816762831772985480182447521425227414873317791342408889987413507450866258682576701709901276326557907494122196374920604025297368966273818165110063927789268983673991101120403710344727157320012776364954666128345090272886739830409733410913763927476572096673582698594697013000416549853567966196866156432234911170324142723152007865427093478266443505797244356280911038797441899530382336871679066660676959221264644310183132745013566615018569898569021232869565141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							219473606e3883d3b7abc0e8ee2018123c90821e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1931 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5699866936213504-fe4.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounting.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admissions.newark.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advising-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advising.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appel.weill.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiapacificinternetgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beechtreees.fcps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biotechmba.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.chinamedicalboard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cob.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cob6.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craigdamosconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctfd-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ahead-penn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economics.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education.crs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elmhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emba.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envs-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erp.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbp.cob.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbp.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geneticmedicine.weillcornell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gunstones.fcps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcare.stonybrook.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthmba.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospitality.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospitalitymba.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htm.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibus.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labor-studies.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leonlevy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainstreetnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'management.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mba.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbamib.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morrison-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpa.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msa.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.asiapacificinternetgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicemba.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ownershipnj.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkervoiceinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'president.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psychology.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sap.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbmedwiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seanparkervoiceinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seapapers.library.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfstatemba.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainablemba.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ahead-penn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.duarte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'untracht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'untracht.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'untracht.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'untracht.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vividattheyates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voice.weill.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voice.weillcornell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admissions.newark.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aesthetic-solutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airforce-technology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asiapacificinternetgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrolltonutilities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.education.crs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elmhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emba.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.endfistula.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcare.stonybrook.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mba.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbamib.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mortgageceo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msa.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicemba.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshore-technology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbmedwiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sustainablemba.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.untracht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.untracht.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.untracht.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.untracht.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vividattheyates.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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