info-dev.calperformances.org

Issued by R3

About this certificate

This digital certificate with serial number 03:1a:54:9b:a9:83:fd:4e:b7:df:27:3b:76:fb:18:d9:cd:ee was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=info-dev.calperformances.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1a:54:9b:a9:83:fd:4e:b7:df:27:3b:76:fb:18:d9:cd:ee
Serial Number (int): 270296662731068653000034957713715494505966
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b8:9e:83:70:a9:93:81:b4:a9:0f:4d:8c:b8:ea:0b:68:2d:79:39:5b
Fingerprint (sha256): 23:43:33:c1:9f:6b:97:27:44:b8:58:e2:83:98:06:95:28:73:36:b2:59:f4:87:a0:a5:f6:6d:50:3d:78:1e:8a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate info-dev.calperformances.org

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for info-dev.calperformances.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

info-dev.calperformances.org
info.appcelerator.com
info.religionnews.com
info.vcfa.edu
infonet.fia.org
inks.govdelivery.com
inside.cityyear.org
inside.gc.cuny.edu
inside.kjzz.org
internal.gcir.org
international.research.ucsb.edu
internetcouncil.nacha.org
intranet.olivecrest.org
ipv6.earthjustice.org
it-chat.web.arizona.edu
it.22squared.com
it.uahs.arizona.edu
itcatalyst.sfsu.edu
iteachu.multidevcom.uaf.edu
job.earthjustice.org
jobs.earthjustice.org
journaldev.naeyc.org
jwplayer.essence.com
kim.lovelace.shiatsusociety.org
kissingbug.arizona.edu
kubernetes.govdelivery.com
labellelab.asu.edu
lambda.usc.edu
landing.pacific.edu
law.ss.pacific.edu
ldap.cscc.unc.edu
legacy.bricartsmedia.org
liberalarts.ss.pacific.edu
live-embed-atu.edu.help
live.aep.cornell.edu
live.bme.cornell.edu
live.cam.cornell.edu
live.ophd.pantheon.berkeley.edu
live.ucdavis.edu
lp.grad.online.udel.edu.help
lp.programs.carey.jhu.edu.help
m.ajc.org
makinghistory.gwu.edu
management.arizona.edu
marketing.magicsoftware.com
marketingprojects.maryville.edu
mediaroom.livestrong.org
mobile-data.skyandtelescope.com
msa2016.berkeley.edu
nanophotonics.asu.edu
nartc.fcm.arizona.edu
news.ged.com
next.warnerpacific.edu
noads.patch.com
odl.rutgers.edu
oist.ucsb.edu
oldsite.itu.edu
online.asu.edu
online.ece.udel.edu
online.foodsafety.msu.edu
ordbc.arizona.edu
partners.starleaf.com
parttime.carey.jhu.edu
pcp.sonoranucedd.fcm.arizona.edu
pharmacy.ss.pacific.edu
platform.ihc.ucsb.edu
pophealth.uahs.arizona.edu
powertest.ctd.northwestern.edu
programs.carey.jhu.edu
projectshare.sfsu.edu
ps-pantheon.umdearborn.edu
psp.sandiegozoo.org
psych.lifesci.ucsb.edu
qa.canceratlas.cancer.org
querybuilder.appcelerator.com
radsafe.berkeley.edu
rc.library.osu.edu
redojs2.patch.com
religion.berkeley.edu
research-pp.stonybrook.edu
resx.usc.edu
reweb.archbalt.org
rgd2020.rutgers.edu
rheumatology.utoronto.ca
rmp.rutgers.edu
rpgp.berkeley.edu
rstinstruments.rstinstruments.com
rstinstrumentsinfo.rstinstruments.com
scilsresx.rutgers.edu
sdgs-staging.scout.org
sexgenderlab.human.cornell.edu
smagent.ctd.northwestern.edu
sourceu.warnerpacific.edu
stage.onlineeducation.psu.edu
stanfordsummersession.stanford.edu
states.drugpolicy.org
static5.bisparks.org
stfincrease.unlv.edu
support.doctorswithoutborders.org

Other certificates including the domain name calperformances.org

(limited to 100 certificates)
securessl-pst1.tessituranetworkhost.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
bi.operaphila.org
hub.meed.com
dev.wellness.yale.edu
secure-uswe2-1.tessituranetwork.com
info-dev.calperformances.org
good.gsm.cornell.edu
secure-uswe2-1.tessituranetwork.com
dev.embody.yale.edu
secure-uswe2-1.tessituranetwork.com
expeditions.sandiegozoo.org
club.kjzz.org
secure-uswe2-1.tessituranetwork.com
dev.wellness.yale.edu
5735834829455360-fe3.pantheonsite.io
secure-uswe2-1.tessituranetwork.com
host2.openminds.com
test.calperformances.org
5649684605435904-fe1.pantheonsite.io
secure-uswe2-1.tessituranetwork.com
calperformances.org
secure-uswe2-1.tessituranetwork.com
calperformances.org
secure-uswe2-1.tessituranetwork.com
connect.iadb.org
bi.operaphila.org
secure-uswe2-1.tessituranetwork.com
securessl-pst1.tessituranetworkhost.com
calperformances.org
bi.operaphila.org
acadmintest.cuofco.org
secure-uswe2-1.tessituranetwork.com
5735834829455360-fe3.pantheonsite.io
bi.operaphila.org
securessl-pst1.tessituranetworkhost.com
test.calperformances.org
covid.usmle.org
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
securessl-pst1.tessituranetworkhost.com
calperformances.org
cms.legacy.com
secure-uswe2-1.tessituranetwork.com
dev.dhsri.yale.edu
d7.cmc.edu
clc.shawnee.edu
bi.operaphila.org
industri40.ida.dk
info-dev.calperformances.org
securessl-pst1.tessituranetworkhost.com
secure-uswe2-1.tessituranetwork.com
d7.cmc.edu
bi.operaphila.org
secure-uswe2-1.tessituranetwork.com
csc.arizona.edu
securessl-pst1.tessituranetworkhost.com
5735834829455360-fe3.pantheonsite.io
secure-uswe2-1.tessituranetwork.com
bi.operaphila.org
csc.arizona.edu
secure-uswe2-1.tessituranetwork.com
csc.arizona.edu
dev.dhsri.yale.edu
secure-uswe2-1.tessituranetwork.com
bi.operaphila.org
bi.operaphila.org
csc.arizona.edu
calperformances.org
securessl-pst1.tessituranetworkhost.com
secure-uswe2-1.tessituranetwork.com
acadmintest.cuofco.org
securessl-pst1.tessituranetworkhost.com
secure-uswe2-1.tessituranetwork.com
secure3.calperformances.org
securessl-pst1.tessituranetworkhost.com
connect.iadb.org
bi.operaphila.org
dev-lp-jhubsph.edu.help
citeak.multidevcom.uaf.edu
bi.operaphila.org
industri40.ida.dk
secure-uswe2-1.tessituranetwork.com
coins.rutgers.edu
design-engineering.princeton.edu
dev-web-degacc.edu.help
bi.operaphila.org
bi.capacityinteractive.com
dashboard.calperformances.org
secure-uswe2-1.tessituranetwork.com
dev-web-degacc.edu.help
securessl-pst1.tessituranetworkhost.com
bi.operaphila.org
gws-uat.earthjustice.org
bi.operaphila.org
bi.operaphila.org

Certificate

The complete raw certificate details for info-dev.calperformances.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270296662731068653000034957713715494505966
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-17 18:02:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-15 18:02:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'info-dev.calperformances.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2370 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info-dev.calperformances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.vcfa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infonet.fia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inks.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.cityyear.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.gc.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.kjzz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.gcir.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international.research.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetcouncil.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.olivecrest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv6.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-chat.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.22squared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcatalyst.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iteachu.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'job.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journaldev.naeyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwplayer.essence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kim.lovelace.shiatsusociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kissingbug.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubernetes.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labellelab.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambda.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldap.cscc.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.bricartsmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberalarts.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-embed-atu.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.bme.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.grad.online.udel.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.programs.carey.jhu.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ajc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'management.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.magicsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingprojects.maryville.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaroom.livestrong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-data.skyandtelescope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msa2016.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanophotonics.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.ged.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.warnerpacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noads.patch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odl.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oist.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldsite.itu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.ece.udel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.foodsafety.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordbc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.starleaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parttime.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcp.sonoranucedd.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacy.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.ihc.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pophealth.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powertest.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programs.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectshare.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-pantheon.umdearborn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psp.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psych.lifesci.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.canceratlas.cancer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'querybuilder.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsafe.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.library.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redojs2.patch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religion.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research-pp.stonybrook.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reweb.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgd2020.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmp.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpgp.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstruments.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstrumentsinfo.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scilsresx.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdgs-staging.scout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexgenderlab.human.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smagent.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourceu.warnerpacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanfordsummersession.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'states.drugpolicy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static5.bisparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfincrease.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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