citrix.remote.naylor.com

Issued by R3

About this certificate

This digital certificate with serial number 03:45:66:c6:4c:96:b3:d5:50:dc:f4:22:8a:ed:49:8e:53:9d was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=citrix.remote.naylor.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:45:66:c6:4c:96:b3:d5:50:dc:f4:22:8a:ed:49:8e:53:9d
Serial Number (int): 284952951996576555188240579422784339202973
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 20:f8:b4:46:7d:37:81:6c:a2:2a:6a:82:3e:4c:21:92:71:01:06:00
Fingerprint (sha256): 20:a2:ca:4e:44:83:50:be:b8:f1:ec:f7:cd:fa:44:43:44:13:86:a1:ea:7c:a4:8e:94:54:34:67:31:f8:47:d8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate citrix.remote.naylor.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citrix.remote.naylor.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citrix.remote.naylor.com
civ.ctd.northwestern.edu
clc.shawnee.edu
cleanmedia.americamagazine.org
club.kjzz.org
cluster011.naylor.com
cms.legacy.com
coins.rutgers.edu
connect.iadb.org
covid.usmle.org
cqn-erc.arizona.edu
csc.arizona.edu
cysis.engineering.asu.edu
d7.cmc.edu
d7store.juilliard.edu
data.worldjusticeproject.org
design-engineering.princeton.edu
dev-camdenbase.libraries.rutgers.edu
dev-covid19.chop.edu
dev-lp-jhubsph.edu.help
dev-web-degacc.edu.help
dev-www2.ofx.com
dev.aspcapro.org
dev.business-services.upenn.edu
dev.cmsi.gse.upenn.edu
dev.ctd.northwestern.edu
dev.curf.upenn.edu
dev.dhsri.yale.edu
dev.ece.cornell.edu
dev.efc.ny.gov
dev.embody.yale.edu
dev.mae.cornell.edu
dev.mse.cornell.edu
dev.nebrwesleyan.edu
dev.online.arbor.edu
dev.onlineeducation.psu.edu
dev.pdp.pantheon.berkeley.edu
dev.shibtest7.isc.upenn.edu
dev.thedoorway.nh.gov
dev.wellness.yale.edu
dev.wrightlaboratory.yale.edu
dev.wti.yale.edu
dev.yllt.yale.edu
dev1.si.umich.edu
devdr.azmex.arizona.edu
developer.zoonaplus.com
dial.sralab.org
digitalanthology.folger.edu
dirtpol.macmillan.yale.edu
dmats.spcs.stanford.edu
dmats.stanford.edu
drugdelivery.engr.ucsb.edu
ds.arizona.edu
ebot200.multidevcom.uaf.edu
ecalso.berkeley.edu
education.ss.pacific.edu
ehs.sph.berkeley.edu
embi.commerce.virginia.edu
embody.yale.edu
engaginghumanities.ucsb.edu
engineering.ss.pacific.edu
environment.research.yale.edu
eoc.asu.edu
esgtimeline.iadb.org
esw.osu.edu
expeditions.sandiegozoo.org
explore.hunterbusinessschool.edu
exploringthecomplexity.ucdavis.edu
faculty.gsm.ucdavis.edu
fhirdeveloper.bcbs.com
flta.cli.asu.edu
gem.business.ucdenver.edu
get.pima.edu
giftcertificates.cookbookcooks.com
gil.engineering.asu.edu
gis.archbalt.org
giveto.shawnee.edu
greekstudies.sfsu.edu
gsefilms.gse.upenn.edu
gtpe.pe.gatech.edu
hcii.cs.cmu.edu
heal.ucdavis.edu
healthsciences.ss.pacific.edu
hockey.arizona.edu
host2.openminds.com
host90.farmermac.com
hr-kiosk.tsu.edu
id-www.ucsb.edu
igert.ucsb.edu
ignitedlab.asu.edu
imgs.skylinehomeloans.com
inas2.uga.edu
incapsula-wecommerce.pernod-ricard.com

Other certificates including the domain name naylor.com

(limited to 100 certificates)
5754456129929216-fe2.pantheonsite.io
demo.naylor.com
citeak.multidevcom.uaf.edu
naylor.com
naylor.com
helpdesk.tranter.com
chns120.courseresource.yale.edu
banking-business-review.com
helpdesk.brownbear.com
5754456129929216-fe2.pantheonsite.io
product.naylor.com
support.precisio.services
chns168.courseresource.yale.edu
communicationsbenchmark.naylor.com
service-desk.awansoft.biz
community.naylor.com
naylor.com
content.naylor.com
support.soriansolutions.com
5754456129929216-fe2.pantheonsite.io
helpdesk.brownbear.com
service-desk.awansoft.biz
5754456129929216-fe2.pantheonsite.io
5754456129929216-fe2.pantheonsite.io
brassunion.com
*.naylor.com
support.precisio.services
product.naylor.com
chns168.courseresource.yale.edu
tic.mesadeayuda.net
helpdesk.brownbear.com
demo.naylor.com
product.naylor.com
mis.naylor.com
160.167.tmcapital.com
5754456129929216-fe2.pantheonsite.io
citeak.multidevcom.uaf.edu
www.naylor.com
product.naylor.com
servicedesk.c-path.org
chns130.courseresource.yale.edu
*.dev.naylor.com
banking-business-review.com
*.naylor.com
citrix.remote.naylor.com
2.www.upenn.edu
support.precisio.services
banking-business-review.com
*.naylor.com
clc.shawnee.edu
160.167.tmcapital.com
service-desk.awansoft.biz
chns130.courseresource.yale.edu
5754456129929216-fe2.pantheonsite.io
servicedesk.securiteassurance.com
*.naylor.com
product.naylor.com
*.naylor.com
*.qa.naylor.com
helpdesk.fairwaylawns.com
connect.qa.naylor.com
naylor.com
*.naylor.com
*.naylor.com
naylor.com
*.naylor.com
banking-business-review.com
service-desk.awansoft.biz
servicedesk.c-path.org
enterprisemgmt.myairlife.com
*.naylor.com
tic.mesadeayuda.net
www.naylor.com
citeak.multidevcom.uaf.edu
naylor.com
chem674.multidevcom.uaf.edu
naylor.com
banking-business-review.com
160.167.tmcapital.com
naylor.com
*.career-services.qa.naylor.com
banking-business-review.com
*.naylor.com
citeak.multidevcom.uaf.edu
naylor.com
5754456129929216-fe2.pantheonsite.io
service-desk.awansoft.biz
chem674.multidevcom.uaf.edu
naylor.com
naylor.com
*.naylor.com
naylor.com
5754456129929216-fe2.pantheonsite.io
chns168.courseresource.yale.edu
*.qa.naylor.com
www.naylor.com
citeak.multidevcom.uaf.edu
*.dev.naylor.com
banking-business-review.com
naylor.com

Certificate

The complete raw certificate details for citrix.remote.naylor.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284952951996576555188240579422784339202973
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-10 08:12:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-08 08:12:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citrix.remote.naylor.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2159 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrix.remote.naylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civ.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clc.shawnee.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanmedia.americamagazine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'club.kjzz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cluster011.naylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.legacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coins.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.iadb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid.usmle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cqn-erc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cysis.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd7.cmc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd7store.juilliard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.worldjusticeproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design-engineering.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-camdenbase.libraries.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-covid19.chop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-lp-jhubsph.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-web-degacc.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www2.ofx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.aspcapro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.business-services.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cmsi.gse.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.curf.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dhsri.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ece.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.efc.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.embody.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.online.arbor.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.pdp.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.shibtest7.isc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.thedoorway.nh.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wellness.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wrightlaboratory.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wti.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.yllt.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.si.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devdr.azmex.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.zoonaplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dial.sralab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalanthology.folger.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirtpol.macmillan.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.spcs.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugdelivery.engr.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebot200.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecalso.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehs.sph.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embi.commerce.virginia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embody.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engaginghumanities.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engineering.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'environment.research.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eoc.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esgtimeline.iadb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esw.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expeditions.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.hunterbusinessschool.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploringthecomplexity.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faculty.gsm.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhirdeveloper.bcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flta.cli.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gem.business.ucdenver.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.pima.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcertificates.cookbookcooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gil.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveto.shawnee.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greekstudies.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsefilms.gse.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtpe.pe.gatech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcii.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heal.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthsciences.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockey.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host2.openminds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host90.farmermac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr-kiosk.tsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id-www.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igert.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ignitedlab.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgs.skylinehomeloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inas2.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula-wecommerce.pernod-ricard.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000183c12ac6890000040300483046022100f5ead1a224d386a17015a3e70e9950c7665279edeed7bd36157fbce35b08d4ba022100e2e4bad6c51b14cd5bede8616ce6de62336753f5e8f1274696a0fca3036ca648007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000183c12ac6ba0000040300473045022100b279e5281b0b50cdca2089647a7ed2051d38309473e79921d0bc74472b0d677a02202b6ac164130dadc80c85bc5f3a1c83d3ae923729bd0fac33cafcbdf997c0b28d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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