alldata.com

Issued by R3

About this certificate

This digital certificate with serial number 03:bc:16:15:2b:08:34:eb:c7:3a:4e:a0:4b:d6:2c:0f:a8:62 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alldata.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bc:16:15:2b:08:34:eb:c7:3a:4e:a0:4b:d6:2c:0f:a8:62
Serial Number (int): 325339295703352284967610976771478410733666
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 27:6a:a7:f5:c4:07:87:a5:dd:1f:df:9b:e2:6b:26:24:79:e7:79:94
Fingerprint (sha256): 23:0c:a2:ee:dd:b8:58:da:4b:c2:59:fb:bb:2f:7d:cd:99:21:f1:b5:39:5c:8f:69:b1:0a:12:c0:cd:a9:04:38

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate alldata.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alldata.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

161511-web1.vilcek.org
1ggens.morneaushepell.com
2.www.upenn.edu
2010.netimpact.org
2011.waterfrontoronto.ca
21.calrest.org
39.calrest.org
ab-csp.edu.help
abc.appcelerator.com
acadmintest.cuofco.org
act.americancouncils.org
act.mattek.com
adfs.shoneys.com
admin.mrc.org
admin.naco.org
admin.operationhope.org
admin.rooomy.com
admin.sdzsafaripark.org
adminanimals.sandiegozoo.org
administration.unlv.edu
adminsvcs.unlv.edu
advertise.tu.org
afasmtp.actorsfund.org
agents.umbc.edu
aiq.adisa.org
alaskamastergardener.multidevcom.uaf.edu
alldata.com
allofusaz.uahs.arizona.edu
alpha1.americanancestors.org
alt.test.principal.com
amyrice.religionnews.com
anniversaries.uahs.arizona.edu
api-staging.scout.org
app.cleanplates.com
app.familyexpectations.com
appcamp.engineering.asu.edu
application-resource.parttime.carey.jhu.edu
apps.americancouncils.org
apps.mcny.org
apps2.societyforscience.org
aramark.maxonlift.com
archnet.archbalt.org
archydro.crwr.utexas.edu
ariel.ppld.org
arkofhope.crs.org
asktico.lib.berkeley.edu
athomejan.digitalsummit.com
atv.law.nyu.edu
audit.sfsu.edu
augment.alaska.edu
autodiscoverla.actorsfund.org
avnetinnovationlab.engineering.asu.edu
awards.opcw.org
b.programs.online.utica.edu
banking-business-review.com
belkin.rutgers.edu
beta.skyandtelescope.org
bickertonportables.co.uk
bigidea.rutgers.edu
biopoliticaltimes.org
blog.brightfarms.com
blogs.earthjustice.org
bold.albion.edu
boztchividjian.religionnews.com
brainweek.dana.org
brassunion.com
brianpellot.religionnews.com
bridge.ucsb.edu
broadway.playhousesquare.org
bso.ac.uk
business.ss.pacific.edu
buyersguide.aaps.org
cabana.online
caldesignlab.berkeley.edu
caminosseguros.iadb.org
campaign.ucsc.edu
canal9.com.ar
careers.whittier.edu
carpepm.almonds.com
cdi.uga.edu
cdn-test.battlefields.org
census.arizona.edu
cetys.udesa.edu.ar
charon.sreb.org
chat-rl.web.arizona.edu
cornthins.com
datahero.com
eduhup.com
emetry.io
executionists.com
floridahospitalcancer.com
gmi.edu
hamiltonexhibition.com
leeanatankersley.com
live-ipmb.pantheonsite.io
live-legacy-cms.pantheonsite.io
nestlebaby.in.th
nobleenergyinc.com
thepointalehouse.com
wptblog.org

Other certificates including the domain name alldata.com

(limited to 100 certificates)
cars.beta.alldata.com
5670794235478016-fe4.pantheonsite.io
manageonline.alldata.com
alldata.com
academic.gsm.cornell.edu
billing.alldata.com
manageservices-beta.alldata.com
5700911208857600-fe3.pantheonsite.io
5670794235478016-fe4.pantheonsite.io
academic.gsm.cornell.edu
5670794235478016-fe4.pantheonsite.io
www.aamco.alldata.com
motor3k.alldata.com
*.alldata.com
oauth.alldata.com
manageonline.alldata.com
europe.alldata.com
5724160613416960-fe2.pantheonsite.io
alldata.com
5700911208857600-fe3.pantheonsite.io
5700911208857600-fe3.pantheonsite.io
5670794235478016-fe4.pantheonsite.io
manageservices-beta.alldata.com
5670794235478016-fe4.pantheonsite.io
support.alldata.com
oauth-beta.alldata.com
community.alldata.com
5700911208857600-fe3.pantheonsite.io
repairinfo.beta.alldata.com
5630239073894400-fe2.pantheonsite.io
5760443222065152-fe3.pantheonsite.io
5670794235478016-fe4.pantheonsite.io
orders.alldata.com
*.alldata.com
161511-web1.vilcek.org
academic.gsm.cornell.edu
5760443222065152-fe3.pantheonsite.io
*.alldata.com
*.alldata.com
161511-web1.vilcek.org
repairinfo.services.alldata.com
lof.alldata.com
5700911208857600-fe3.pantheonsite.io
*.alldata.com
5670794235478016-fe4.pantheonsite.io
5670794235478016-fe4.pantheonsite.io
adsupport.alldata.com
161511-web1.vilcek.org
my-beta.alldata.com
*.alldata.com
5760443222065152-fe3.pantheonsite.io
*.alldata.com
5670794235478016-fe4.pantheonsite.io
*.alldata.com
5700911208857600-fe3.pantheonsite.io
academic.gsm.cornell.edu
5700911208857600-fe3.pantheonsite.io
repair-beta.alldata.com
repairinfo.services.alldata.com
www.aamco.alldata.com
training.alldata.com
*.alldata.com
5724160613416960-fe2.pantheonsite.io
5670794235478016-fe4.pantheonsite.io
support.alldata.com
161511-web1.vilcek.org
app.alldata.com
repair.alldata.com
academic.gsm.cornell.edu
alldata.com
oauth.alldata.com
www.alldata.com
academic.gsm.cornell.edu
repair-beta.alldata.com
alldata.com
academic.gsm.cornell.edu
repairinfo.services.alldata.com
5760443222065152-fe3.pantheonsite.io
cars.services.alldata.com
5700911208857600-fe3.pantheonsite.io
*.alldata.com
5700911208857600-fe3.pantheonsite.io
repair.alldata.com
*.alldata.com
161511-web1.vilcek.org
adsupport.alldata.com
mol-sprintbeta.alldata.com
my-beta.alldata.com
5670794235478016-fe4.pantheonsite.io
5670794235478016-fe4.pantheonsite.io
5700911208857600-fe3.pantheonsite.io
my-beta.alldata.com
alldata.com
academic.gsm.cornell.edu
app.alldata.com
alldatasavings.alldata.com
5670794235478016-fe4.pantheonsite.io
*.alldata.com
5700911208857600-fe3.pantheonsite.io
repair.alldata.com

Certificate

The complete raw certificate details for alldata.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325339295703352284967610976771478410733666
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-28 06:07:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-26 06:07:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alldata.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2228 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '161511-web1.vilcek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1ggens.morneaushepell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2.www.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2010.netimpact.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2011.waterfrontoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '21.calrest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '39.calrest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ab-csp.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abc.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acadmintest.cuofco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.mattek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs.shoneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.naco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.operationhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rooomy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sdzsafaripark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminanimals.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'administration.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminsvcs.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertise.tu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afasmtp.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.umbc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq.adisa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaskamastergardener.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alldata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allofusaz.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha1.americanancestors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alt.test.principal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amyrice.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anniversaries.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-staging.scout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cleanplates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.familyexpectations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appcamp.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'application-resource.parttime.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps2.societyforscience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aramark.maxonlift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archnet.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archydro.crwr.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ariel.ppld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkofhope.crs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asktico.lib.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athomejan.digitalsummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atv.law.nyu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audit.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augment.alaska.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscoverla.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avnetinnovationlab.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awards.opcw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b.programs.online.utica.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banking-business-review.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belkin.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.skyandtelescope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bickertonportables.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigidea.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biopoliticaltimes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.brightfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bold.albion.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boztchividjian.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainweek.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brassunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brianpellot.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadway.playhousesquare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bso.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyersguide.aaps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabana.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caldesignlab.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caminosseguros.iadb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canal9.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.whittier.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carpepm.almonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdi.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-test.battlefields.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'census.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetys.udesa.edu.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charon.sreb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat-rl.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornthins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datahero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduhup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emetry.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'executionists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floridahospitalcancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmi.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamiltonexhibition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leeanatankersley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-ipmb.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-legacy-cms.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestlebaby.in.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nobleenergyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepointalehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wptblog.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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