dev.dhsri.yale.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:2d:ce:4f:8d:97:03:5c:97:7b:3a:70:32:9f:08:50:08:0f was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.dhsri.yale.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2d:ce:4f:8d:97:03:5c:97:7b:3a:70:32:9f:08:50:08:0f
Serial Number (int): 364036084268850981409643106198158706739215
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c5:4c:fa:09:e3:93:60:34:56:2a:46:fe:b6:cc:c9:43:d6:a2:3f:b2
Fingerprint (sha256): 21:8f:1c:d9:4b:f0:c5:ca:1c:f9:e5:f7:c2:3e:b1:9e:e4:62:89:0a:30:64:de:6b:1f:81:50:2e:e7:46:e9:4d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dev.dhsri.yale.edu

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.dhsri.yale.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.dhsri.yale.edu
dev.efc.ny.gov
dev.embody.yale.edu
dev.mse.cornell.edu
dev.shibtest7.isc.upenn.edu
dev.thedoorway.nh.gov
dev.wellness.yale.edu
dev.yllt.yale.edu
dev1.si.umich.edu
devdr.azmex.arizona.edu
developer.zoonaplus.com
dirtpol.macmillan.yale.edu
dmats.spcs.stanford.edu
dmats.stanford.edu
drugdelivery.engr.ucsb.edu
ds.arizona.edu
ebot200.multidevcom.uaf.edu
education.ss.pacific.edu
ehs.sph.berkeley.edu
embi.commerce.virginia.edu
embody.yale.edu
engaginghumanities.ucsb.edu
engineering.ss.pacific.edu
environment.research.yale.edu
eoc.asu.edu
eprofile.osu.edu
esgtimeline.iadb.org
esw.osu.edu
ews.engineering.osu.edu
expeditions.sandiegozoo.org
exploringthecomplexity.ucdavis.edu
faculty.gsm.ucdavis.edu
fhirdeveloper.bcbs.com
flta.cli.asu.edu
gem.business.ucdenver.edu
get.pima.edu
giftcertificates.cookbookcooks.com
gil.engineering.asu.edu
greekstudies.sfsu.edu
gsefilms.gse.upenn.edu
gtpe.pe.gatech.edu
hcii.cs.cmu.edu
heal.ucdavis.edu
healthsciences.ss.pacific.edu
hockey.arizona.edu
host90.farmermac.com
hr-kiosk.tsu.edu
id-www.ucsb.edu
igert.ucsb.edu
ignitedlab.asu.edu
imgs.skylinehomeloans.com
inas2.uga.edu
incapsula-wecommerce.pernod-ricard.com
india-test.generation.org
industri40.ida.dk
info-dev.calperformances.org
info.vcfa.edu
inside.gc.cuny.edu
it-chat.web.arizona.edu
it.uahs.arizona.edu
itcatalyst.sfsu.edu
jwplayer.essence.com
labellelab.asu.edu
lambda.usc.edu
landing.pacific.edu
law.ss.pacific.edu
liberalarts.ss.pacific.edu
live-orientation.pantheon.io
live.aep.cornell.edu
live.bme.cornell.edu
live.cam.cornell.edu
live.engineering.cornell.edu
live.ophd.pantheon.berkeley.edu
live.ucdavis.edu
lp.grad.online.udel.edu.help
m.ajc.org
makinghistory.gwu.edu
management.arizona.edu
mediaroom.livestrong.org
mediasandbox.cas.msu.edu
meetingsqa.aaas.org
mindsmatter.civicaction.ca
mt.nokidhungry.org
mtageniustransitchallenge.ny.gov
multidevcom.uaf.edu
nanophotonics.asu.edu
nartc.fcm.arizona.edu
new.yearup.org
nistmep.blogs.govdelivery.com
nxterra.ucop.edu
odl.rutgers.edu
oist.ucsb.edu
oldsite.itu.edu
online.asu.edu

Other certificates including the domain name yale.edu

(limited to 100 certificates)
5648269346603008-fe1.pantheonsite.io
ar2017hr.yale.edu
cds4.cvent.com
5730192894984192-fe4.pantheonsite.io
5732312192909312-fe3.pantheonsite.io
*.drama.yale.edu
stm.yale.edu
5651276360581120-fe3.pantheonsite.io
5640887774216192-fe4.pantheonsite.io
5635220564869120-fe4.pantheonsite.io
5769623379116032-fe2.pantheonsite.io
carpepm.almonds.com
5759522421342208-fe1.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
*.dkw2.yale.edu
5755553334689792-fe2.pantheonsite.io
libapp-test.library.yale.edu
coupdebrass.sites.yale.edu
us.prod.campusgroups.com
5648554290839552-fe1.pantheonsite.io
www.yiorecruiting.invest.yale.edu
statml.yale.edu
www.sustainablefood.yale.edu
5633267831144448-fe1.pantheonsite.io
quarantine-tst.its.yale.edu
b3.shared.global.fastly.net
5649648836411392-fe3.pantheonsite.io
5732808731394048-fe3.pantheonsite.io
5723088213770240-fe3.pantheonsite.io
5724466092965888-fe4.pantheonsite.io
tst.ogc.yale.edu
6328556195938304-fe4.pantheonsite.io
cluster.technolutions.net
5651276360581120-fe3.pantheonsite.io
biomedcareerfair.yale.edu
mvms-tstp-ms.ps.yale.edu
yul-pres-tapi.library.yale.edu
5648269346603008-fe1.pantheonsite.io
tst.studyabroad.yale.edu
5714468482842624-fe4.pantheonsite.io
comitalab.yale.edu
ris-store.its.yale.edu
cluster3.technolutions.net
infoed-patch.its.yale.edu
5677090456207360-fe2.pantheonsite.io
stearnslab.yale.edu
5688290254520320-fe2.pantheonsite.io
5720929187397632-fe3.pantheonsite.io
cohoc-dev.its.yale.edu
us.prod.campusgroups.com
5643365030821888-fe1.pantheonsite.io
5745189578604544-fe1.pantheonsite.io
nartc.fcm.arizona.edu
rotc.yale.edu
5680876067225600-fe2.pantheonsite.io
calendar.sdzsafaripark.org
5746821397741568-fe3.pantheonsite.io
apply.nursing.yale.edu
5746821397741568-fe3.pantheonsite.io
application.mam.som.yale.edu
5633267831144448-fe1.pantheonsite.io
5648269346603008-fe1.pantheonsite.io
*.profile.yale.edu
sa105gl.wpc.edgecastcdn.net
5629935204958208-fe2.pantheonsite.io
5677303661068288-fe3.pantheonsite.io
tst.fas.yale.edu
5723088213770240-fe3.pantheonsite.io
5740315998683136-fe1.pantheonsite.io
tls.automattic.com
dev.songlab.yale.edu
5648554290839552-fe1.pantheonsite.io
5743114304094208-fe3.pantheonsite.io
dev.psychologyfaculty.yale.edu
5738940401188864-fe3.pantheonsite.io
5758048710688768-fe3.pantheonsite.io
5640887774216192-fe4.pantheonsite.io
5719378301550592-fe3.pantheonsite.io
6208428913459200-fe4.pantheonsite.io
www.yhpstudentwaiver.yale.edu
effy.yale.edu
5766466041282560-fe4.pantheonsite.io
orbit.astronomy.yale.edu
yh-emposrp.yu.yale.edu
tst.cce.yalecollege.yale.edu
5755812509122560-fe2.pantheonsite.io
ebiz-vendor.yale.edu
application.mam.som.yale.edu
identity.yale.edu
5769623379116032-fe2.pantheonsite.io
cdrom-access.library.yale.edu
seas.yale.edu
designcop.yale.edu
5740240702537728-fe2.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
cds4.cvent.com
uconnectlabs.com
5704837555552256-fe2.pantheonsite.io
5759522421342208-fe1.pantheonsite.io
5734616174428160-fe1.pantheonsite.io

Certificate

The complete raw certificate details for dev.dhsri.yale.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364036084268850981409643106198158706739215
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-23 13:04:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-22 13:04:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.dhsri.yale.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dhsri.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.efc.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.embody.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.shibtest7.isc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.thedoorway.nh.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wellness.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.yllt.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.si.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devdr.azmex.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.zoonaplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirtpol.macmillan.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.spcs.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugdelivery.engr.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebot200.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehs.sph.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embi.commerce.virginia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embody.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engaginghumanities.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engineering.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'environment.research.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eoc.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eprofile.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esgtimeline.iadb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esw.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ews.engineering.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expeditions.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploringthecomplexity.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faculty.gsm.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhirdeveloper.bcbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flta.cli.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gem.business.ucdenver.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.pima.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcertificates.cookbookcooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gil.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greekstudies.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsefilms.gse.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtpe.pe.gatech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcii.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heal.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthsciences.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockey.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host90.farmermac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr-kiosk.tsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id-www.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igert.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ignitedlab.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgs.skylinehomeloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inas2.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incapsula-wecommerce.pernod-ricard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'india-test.generation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industri40.ida.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info-dev.calperformances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.vcfa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.gc.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-chat.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcatalyst.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwplayer.essence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labellelab.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambda.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberalarts.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-orientation.pantheon.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.bme.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.engineering.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.grad.online.udel.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ajc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'management.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaroom.livestrong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediasandbox.cas.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetingsqa.aaas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindsmatter.civicaction.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mt.nokidhungry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtageniustransitchallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanophotonics.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.yearup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nistmep.blogs.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nxterra.ucop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odl.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oist.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldsite.itu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.asu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001836aa9fc2c0000040300483046022100e8cfa2bbdfe3e1675ff05e7bf00ce77d1480770fa3181716e18adacb53cc7541022100d011b92f1e60064b45a91078e716e9a0bf15861fa26cd1c45f1405454cb6a33400770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001836aa9fc3c0000040300483046022100b92a6c859abec09d7f669f9edbbff8668eb4db0953db27fb5baaef991c713e67022100d8a3832611473962c875a8c2c24330f8cfffa0a7c01a92363ddf610a81402374
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003391f98958c2868e91ef1d0f10e8fa2ec85b0e033e637733f2965c3dc9ad2cced85456e7af9c3e17e09db2bebf25be0792dba94e7674f199f217c5a2451f5d05064bd837096389107d8aa7e9fadfa0f30ec9fba1dffabe9580ee827c7c7e3a9e2f8914f3f3b50a4e53d1e331c8f19b61165c50585e8cf7d0cb54a8411926567a911d105126b56e43bcaf00e7f46671ef2dded16b13cc8addef9a3073665c089970235e3fb640d55db69481d504d33ff46f5e96aa21f91ff22eee37cc5a5d41a936b0efa82c70ef36e522caffb6e159f10dfa873260e831977ae1fe94ff2251b7e413b7ffd51e01a721319b9b50be9f70a69105206853b3faaaccbe0d0ff61265