5680423082393600-fe4.pantheonsite.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f6:c0:1a:a6:d9:05:13:ec:27:21:21:89:65:b6:e2:4a:85 was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=5680423082393600-fe4.pantheonsite.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f6:c0:1a:a6:d9:05:13:ec:27:21:21:89:65:b6:e2:4a:85
Serial Number (int): 432413956148574951333214255539623087458949
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 57:02:fd:bf:2c:4d:ef:83:1b:a9:79:63:4d:e6:41:5a:40:15:b8:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 01:0a:ce:d5:07:96:8a:36:cb:68:27:b4:cc:ea:e6:99:9e:10:cd:a4
Fingerprint (sha256): 23:14:bf:66:39:5e:4b:04:6b:1a:a5:ef:4c:a4:03:c4:b5:0a:94:a6:d1:cf:5a:73:15:6a:71:d5:b0:b1:20:e9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 5680423082393600-fe4.pantheonsite.io

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 5680423082393600-fe4.pantheonsite.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

5680423082393600-fe4.pantheonsite.io
aap.georgetown.edu
aggiehero.ucdavis.edu
altawaverly.com
amerivents.com
api.pintexsolutions.com
app.pintexsolutions.com
asev.org
benefits.georgetown.edu
bioinformatics.georgetown.edu
blogs.ucdavis.edu
brownstoneproperties.com
commencement.georgetown.edu
cricketwirelessperks.com
curiosity.ucdavis.edu
customerexperiencenetwork.org
financialaffairs.georgetown.edu
french.georgetown.edu
friendscentercorp.org
geriatrics.georgetown.edu
ghstar.org
globalhealthms.georgetown.edu
go.ucdavis.edu
governance.georgetown.edu
gradcareer.georgetown.edu
green-promise.org
grvp.georgetown.edu
history.georgetown.edu
hoyakids.georgetown.edu
icp.georgetown.edu
ideaa.georgetown.edu
imaginationtakesshape.com
innocentbystander.com.au
internalaudit.georgetown.edu
italianinstitute.college.georgetown.edu
journalism.georgetown.edu
kidsandenvironment.georgetown.edu
mailservices.georgetown.edu
medievalstudies.georgetown.edu
memory.georgetown.edu
my.pintexsolutions.com
ofrboise.com
pilothilladvisors.com
prisonsandjustice.georgetown.edu
rightsforall.org
rswreverseengineeringandmachining.com
spanport.georgetown.edu
sthope.org
tag.bio
test.feedingamerica.org
thetractiongroup.com
unfold.ucdavis.edu
unfoldpodcast.ucdavis.edu
vintagehousing.com
www.airportscouncil.org
www.altawaverly.com
www.amerivents.com
www.asev.org
www.brownstoneproperties.com
www.cricketwirelessperks.com
www.customerexperiencenetwork.net
www.customerexperiencenetwork.org
www.friendscentercorp.org
www.ghstar.org
www.green-promise.org
www.imaginationtakesshape.com
www.innocentbystander.com.au
www.ofrboise.com
www.openhandatlanta.org
www.pilothilladvisors.com
www.rightsforall.org
www.rswreverseengineeringandmachining.com
www.sthope.org
www.thetractiongroup.com
www.vintagehousing.com

Other certificates including the domain name 5680423082393600-fe4.pantheonsite.io

(limited to 100 certificates)
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io

Certificate

The complete raw certificate details for 5680423082393600-fe4.pantheonsite.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMnzCCC4egAwIBAgISBPbAGqbZBRPsJyEhiWW24kqFMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MDYxMzQ1MDlaFw0x
OTExMDQxMzQ1MDlaMC8xLTArBgNVBAMTJDU2ODA0MjMwODIzOTM2MDAtZmU0LnBh
bnRoZW9uc2l0ZS5pbzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJQx
qn5HEefCQxlI43xd6LsU84gDLqu9yyRCRUAS1jFVbcUqiwjgwwHP7yKp2jJ+VRlJ
zXegD89BYWQr/TLYESzGe2FMFuNqTXUe8RSuhfkgTmQRuCa/dJnRHXCUpzltEWLb
AMeojfpVwpr2xRpRkxj2xNbbp8lJSAlBHkY6AL6lx4AlRs3Rv6kxRkqxHYf+1aW+
qr2NrKnGGvY5GDIHpdaad4Y3coKC8u9udFOPOD1m0Oa0LD76RUP1KWpo/9u00ahQ
oCdE6/Ulv3fUK+yBMCF0SHCPHfIogO6oMrIC/MNm9avkZbL4lTB8G/2qeOp6bB7e
oQ1AfeVdv6/vctDtfyECAwEAAaOCCZgwggmUMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUVwL9vyxN74MbqXljTeZBWkAVuDgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3
pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz
cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy
dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCCB0sGA1UdEQSCB0Iwggc+giQ1Njgw
NDIzMDgyMzkzNjAwLWZlNC5wYW50aGVvbnNpdGUuaW+CEmFhcC5nZW9yZ2V0b3du
LmVkdYIVYWdnaWVoZXJvLnVjZGF2aXMuZWR1gg9hbHRhd2F2ZXJseS5jb22CDmFt
ZXJpdmVudHMuY29tghdhcGkucGludGV4c29sdXRpb25zLmNvbYIXYXBwLnBpbnRl
eHNvbHV0aW9ucy5jb22CCGFzZXYub3JnghdiZW5lZml0cy5nZW9yZ2V0b3duLmVk
dYIdYmlvaW5mb3JtYXRpY3MuZ2VvcmdldG93bi5lZHWCEWJsb2dzLnVjZGF2aXMu
ZWR1ghhicm93bnN0b25lcHJvcGVydGllcy5jb22CG2NvbW1lbmNlbWVudC5nZW9y
Z2V0b3duLmVkdYIYY3JpY2tldHdpcmVsZXNzcGVya3MuY29tghVjdXJpb3NpdHku
dWNkYXZpcy5lZHWCHWN1c3RvbWVyZXhwZXJpZW5jZW5ldHdvcmsub3Jngh9maW5h
bmNpYWxhZmZhaXJzLmdlb3JnZXRvd24uZWR1ghVmcmVuY2guZ2VvcmdldG93bi5l
ZHWCFWZyaWVuZHNjZW50ZXJjb3JwLm9yZ4IZZ2VyaWF0cmljcy5nZW9yZ2V0b3du
LmVkdYIKZ2hzdGFyLm9yZ4IdZ2xvYmFsaGVhbHRobXMuZ2VvcmdldG93bi5lZHWC
DmdvLnVjZGF2aXMuZWR1ghlnb3Zlcm5hbmNlLmdlb3JnZXRvd24uZWR1ghlncmFk
Y2FyZWVyLmdlb3JnZXRvd24uZWR1ghFncmVlbi1wcm9taXNlLm9yZ4ITZ3J2cC5n
ZW9yZ2V0b3duLmVkdYIWaGlzdG9yeS5nZW9yZ2V0b3duLmVkdYIXaG95YWtpZHMu
Z2VvcmdldG93bi5lZHWCEmljcC5nZW9yZ2V0b3duLmVkdYIUaWRlYWEuZ2Vvcmdl
dG93bi5lZHWCGWltYWdpbmF0aW9udGFrZXNzaGFwZS5jb22CGGlubm9jZW50Ynlz
dGFuZGVyLmNvbS5hdYIcaW50ZXJuYWxhdWRpdC5nZW9yZ2V0b3duLmVkdYInaXRh
bGlhbmluc3RpdHV0ZS5jb2xsZWdlLmdlb3JnZXRvd24uZWR1ghlqb3VybmFsaXNt
Lmdlb3JnZXRvd24uZWR1giFraWRzYW5kZW52aXJvbm1lbnQuZ2VvcmdldG93bi5l
ZHWCG21haWxzZXJ2aWNlcy5nZW9yZ2V0b3duLmVkdYIebWVkaWV2YWxzdHVkaWVz
Lmdlb3JnZXRvd24uZWR1ghVtZW1vcnkuZ2VvcmdldG93bi5lZHWCFm15LnBpbnRl
eHNvbHV0aW9ucy5jb22CDG9mcmJvaXNlLmNvbYIVcGlsb3RoaWxsYWR2aXNvcnMu
Y29tgiBwcmlzb25zYW5kanVzdGljZS5nZW9yZ2V0b3duLmVkdYIQcmlnaHRzZm9y
YWxsLm9yZ4IlcnN3cmV2ZXJzZWVuZ2luZWVyaW5nYW5kbWFjaGluaW5nLmNvbYIX
c3BhbnBvcnQuZ2VvcmdldG93bi5lZHWCCnN0aG9wZS5vcmeCB3RhZy5iaW+CF3Rl
c3QuZmVlZGluZ2FtZXJpY2Eub3JnghR0aGV0cmFjdGlvbmdyb3VwLmNvbYISdW5m
b2xkLnVjZGF2aXMuZWR1ghl1bmZvbGRwb2RjYXN0LnVjZGF2aXMuZWR1ghJ2aW50
YWdlaG91c2luZy5jb22CF3d3dy5haXJwb3J0c2NvdW5jaWwub3JnghN3d3cuYWx0
YXdhdmVybHkuY29tghJ3d3cuYW1lcml2ZW50cy5jb22CDHd3dy5hc2V2Lm9yZ4Ic
d3d3LmJyb3duc3RvbmVwcm9wZXJ0aWVzLmNvbYIcd3d3LmNyaWNrZXR3aXJlbGVz
c3BlcmtzLmNvbYIhd3d3LmN1c3RvbWVyZXhwZXJpZW5jZW5ldHdvcmsubmV0giF3
d3cuY3VzdG9tZXJleHBlcmllbmNlbmV0d29yay5vcmeCGXd3dy5mcmllbmRzY2Vu
dGVyY29ycC5vcmeCDnd3dy5naHN0YXIub3JnghV3d3cuZ3JlZW4tcHJvbWlzZS5v
cmeCHXd3dy5pbWFnaW5hdGlvbnRha2Vzc2hhcGUuY29tghx3d3cuaW5ub2NlbnRi
eXN0YW5kZXIuY29tLmF1ghB3d3cub2ZyYm9pc2UuY29tghd3d3cub3BlbmhhbmRh
dGxhbnRhLm9yZ4IZd3d3LnBpbG90aGlsbGFkdmlzb3JzLmNvbYIUd3d3LnJpZ2h0
c2ZvcmFsbC5vcmeCKXd3dy5yc3dyZXZlcnNlZW5naW5lZXJpbmdhbmRtYWNoaW5p
bmcuY29tgg53d3cuc3Rob3BlLm9yZ4IYd3d3LnRoZXRyYWN0aW9uZ3JvdXAuY29t
ghZ3d3cudmludGFnZWhvdXNpbmcuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG
CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5
cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA4mlLribo6UAJ6IYbtjuD
1D7n/nSI+6SPKJMBnd3x2/4AAAFsZ2QZNQAABAMARzBFAiAFU4OUHs6v32OHtQv+
ajb1DFuIg7031JVn9DWxPyqBkQIhAPXvfr+jFfmvkPfuzOTzINFPaUXwphOmUX7G
9HNUhiv1AHcAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFsZ2QZ
OQAABAMASDBGAiEAzcGzfUpsenmNcj8L2FgNlk9DTwMEUsbq06R5vroEZXoCIQDG
mphYkVvZNVx7OllZ6i/bosc+cPWScu5fxAGEswMI+zANBgkqhkiG9w0BAQsFAAOC
AQEASMJkSdezhyoGPmC2e+fB3+4ev4b1TcoqqEn3W+iHqDuRky+KNLnU50nTF1vQ
p9pNBbuEm76glE8JNKVRHXRk+IM+qB9QrrMu80o4vja8xH71XKIwMo8o+nFCDSmP
tNG3qfKK6uxyLvKhX11Jwa/KxGEreZwWbdpVv9TmzYEsldNN2mp+h0N1OK2uNY9G
9eNEjQWaLkL34o6WmoG7RlbImKcPsaUWNOiXoMFieRBRWWMgeYozcLFIMCfNC2zO
RKXaQCzYmoTVtYivdEshTLmQq3ueHZSRscTAK1GOEwocd07Y9pImWeqyNhSZSTY6
XzF8jYMRpOFvuloaf8lkwx4jww==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDGqfkcR58JDGUjjfF3o
uxTziAMuq73LJEJFQBLWMVVtxSqLCODDAc/vIqnaMn5VGUnNd6APz0FhZCv9MtgR
LMZ7YUwW42pNdR7xFK6F+SBOZBG4Jr90mdEdcJSnOW0RYtsAx6iN+lXCmvbFGlGT
GPbE1tunyUlICUEeRjoAvqXHgCVGzdG/qTFGSrEdh/7Vpb6qvY2sqcYa9jkYMgel
1pp3hjdygoLy7250U484PWbQ5rQsPvpFQ/Upamj/27TRqFCgJ0Tr9SW/d9Qr7IEw
IXRIcI8d8iiA7qgysgL8w2b1q+RlsviVMHwb/ap46npsHt6hDUB95V2/r+9y0O1/
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432413956148574951333214255539623087458949
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-06 13:45:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-04 13:45:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5680423082393600-fe4.pantheonsite.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18707760347121943150116249891125201859036403023008143853550793296842643752153993493542468762401245989491399482566496677845018962204140898826898583855693902268833321183836113618241714063273293436817034578178841687839353261583958224047309187693662900062540995471919037671490156420065680307641440169474567973187823484285671210902184129097003031949937311897265063911856696198898692612388697304111124020667213646780422057204419974547022685772480755093417658014126728354795298676042279948453478354613858895933936212746952114998739543099196481808951268079465991203011247610995443739493378120184121493825296758081897425108769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5702fdbf2c4def831ba979634de6415a4015b838
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1858 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5680423082393600-fe4.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aap.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggiehero.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altawaverly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amerivents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.pintexsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.pintexsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioinformatics.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brownstoneproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commencement.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketwirelessperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curiosity.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customerexperiencenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialaffairs.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'french.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendscentercorp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geriatrics.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghstar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalhealthms.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'governance.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gradcareer.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'green-promise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grvp.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'history.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoyakids.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icp.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideaa.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imaginationtakesshape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innocentbystander.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internalaudit.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'italianinstitute.college.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journalism.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidsandenvironment.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailservices.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medievalstudies.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memory.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.pintexsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofrboise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilothilladvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prisonsandjustice.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightsforall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rswreverseengineeringandmachining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spanport.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tag.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.feedingamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetractiongroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unfold.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unfoldpodcast.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintagehousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airportscouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altawaverly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amerivents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brownstoneproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cricketwirelessperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.customerexperiencenetwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.customerexperiencenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendscentercorp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghstar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.green-promise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imaginationtakesshape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innocentbystander.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ofrboise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openhandatlanta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pilothilladvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rightsforall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rswreverseengineeringandmachining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sthope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetractiongroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vintagehousing.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c6764193500000403004730450220055383941eceafdf6387b50bfe6a36f50c5b8883bd37d49567f435b13f2a8191022100f5ef7ebfa315f9af90f7eecce4f320d14f6945f0a613a6517ec6f47354862bf5007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c676419390000040300483046022100cdc1b37d4a6c7a798d723f0bd8580d964f434f030452c6ead3a479beba04657a022100c69a9858915bd9355c7b3a5959ea2fdba2c73e70f59272ee5fc40184b30308fb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0048c26449d7b3872a063e60b67be7c1dfee1ebf86f54dca2aa849f75be887a83b91932f8a34b9d4e749d3175bd0a7da4d05bb849bbea0944f0934a5511d7464f8833ea81f50aeb32ef34a38be36bcc47ef55ca230328f28fa71420d298fb4d1b7a9f28aeaec722ef2a15f5d49c1afcac4612b799c166dda55bfd4e6cd812c95d34dda6a7e87437538adae358f46f5e3448d059a2e42f7e28e969a81bb4656c898a70fb1a51634e897a0c162791051596320798a3370b1483027cd0b6cce44a5da402cd89a84d5b588af744b214cb990ab7b9e1d9491b1c4c02b518e130a1c774ed8f6922659eab236149949363a5f317c8d8311a4e16fba5a1a7fc964c31e23c3