clams.aspendiscovery.org

Issued by R3

About this certificate

This digital certificate with serial number 04:8c:8b:8d:60:b4:66:f2:42:bd:7d:7e:5a:93:e3:1b:92:29 was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=clams.aspendiscovery.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8c:8b:8d:60:b4:66:f2:42:bd:7d:7e:5a:93:e3:1b:92:29
Serial Number (int): 396274171862647779737747025699004539965993
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 86:b1:8f:c7:14:c4:06:1b:60:ea:1b:a1:08:bf:64:17:e8:b0:95:a6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6a:71:2c:a9:23:d1:24:c6:0d:ea:f9:26:19:cd:67:83:fc:6d:0e:96
Fingerprint (sha256): 23:9b:ea:7c:fc:dd:7f:a9:8d:7d:2b:b0:ec:84:40:67:cf:6f:a3:b0:c2:fa:56:fc:96:44:f1:67:2d:e7:3f:be

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate clams.aspendiscovery.org

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clams.aspendiscovery.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquinnah.aspendiscovery.org
aquinnah.clamsnet.org
barnstable-sturgis.clamsnet.org
barnstable.aspendiscovery.org
bourne.aspendiscovery.org
bourne.clamsnet.org
brewster-ladies.clamsnet.org
brewster.aspendiscovery.org
cccc-wilkens.clamsnet.org
ccccwilkens.aspendiscovery.org
centerville.aspendiscovery.org
centerville.clamsnet.org
chatham-eldredge.clamsnet.org
chilmark.aspendiscovery.org
chilmark.clamsnet.org
clams.aspendiscovery.org
clamsnet.org
cotuit.aspendiscovery.org
cotuit.clamsnet.org
dennis-east-jacob-sears.clamsnet.org
dennis-memorial.clamsnet.org
dennis-public.clamsnet.org
dennis-south.clamsnet.org
dennis-west.clamsnet.org
dennismemorial.aspendiscovery.org
dennispublic.aspendiscovery.org
dennissouth.aspendiscovery.org
denniswest.aspendiscovery.org
eastham.aspendiscovery.org
eastham.clamsnet.org
edgartown.aspendiscovery.org
edgartown.clamsnet.org
eldredge.aspendiscovery.org
falmouth-public.clamsnet.org
falmouth-west.clamsnet.org
falmouthpublic.aspendiscovery.org
falmouthwest.aspendiscovery.org
harwich-brooks.clamsnet.org
harwichbrooks.aspendiscovery.org
hyannis.aspendiscovery.org
hyannis.clamsnet.org
jacobsears.aspendiscovery.org
kidsclams.aspendiscovery.org
library.clamsnet.org
lida.clamsnet.org
marstons-mills.clamsnet.org
mashpee.aspendiscovery.org
mashpee.clamsnet.org
mmp.aspendiscovery.org
nantucket-atheneum.clamsnet.org
nantucket.aspendiscovery.org
oak-bluffs.clamsnet.org
oakbluffs.aspendiscovery.org
orleans-snow.clamsnet.org
osterville.aspendiscovery.org
osterville.clamsnet.org
provincetown.aspendiscovery.org
provincetown.clamsnet.org
snow.aspendiscovery.org
truro.aspendiscovery.org
truro.clamsnet.org
vineyard-haven.clamsnet.org
vineyardhaven.aspendiscovery.org
wellfleet.aspendiscovery.org
wellfleet.clamsnet.org
west-barnstable-whelden.clamsnet.org
west-tisbury.clamsnet.org
westtisbury.aspendiscovery.org
whelden.aspendiscovery.org
woods-hole.clamsnet.org
woodshole.aspendiscovery.org
yarmouth-port.clamsnet.org
yarmouth-town.clamsnet.org
yarmouthport.aspendiscovery.org
yarmouthtown.aspendiscovery.org

Other certificates including the domain name aspendiscovery.org

(limited to 100 certificates)
catalog.plumcreeklibrary.net
catalog.eulesstx.gov
abbotsford.aspendiscovery.org
opac.westchesterlibraries.org
www.uintahlibrary.org
evpl.aspendiscovery.org
darien.aspendiscovery.org
cadl.aspendiscovery.org
vokal-aspen.bywatersolutions.com
catalog.eulesstx.gov
librarycat.marionfl.org
catalog.eulesstx.gov
mckinney.aspendiscovery.org
blackgold.org
mcpl.aspendiscovery.org
clams.aspendiscovery.org
opac.westchesterlibraries.org
gmilcs.aspendiscovery.org
acpl.us
spokane.aspendiscovery.org
pit.aspendiscovery.org
catalog.sbplibrary.org
vokal-aspen.bywatersolutions.com
catalog.santafelibrary.org
monterey.aspendiscovery.org
bywaterconsortium.aspendiscovery.org
metrolibrary.aspendiscovery.org
help.aspendiscovery.org
mountainview.aspendiscovery.org
gmilcs.aspendiscovery.org
catalog.dubcolib.org
blackgold.org
gmilcs.aspendiscovery.org
catalog.dmpl.org
corvallis.aspendiscovery.org
clams.aspendiscovery.org
vokal-aspen.bywatersolutions.com
cedarpark.aspendiscovery.org
readokaloosa.org
ainsworth.aspendiscovery.org
blackgold.org
www.uintahlibrary.org
catalog.eulesstx.gov
blackgold.org
vokal-aspen.bywatersolutions.com
mountainview.aspendiscovery.org
catalog.sbplibrary.org
huntsville.aspendiscovery.org
bywaterconsortium.aspendiscovery.org
clams.aspendiscovery.org
clams.aspendiscovery.org
blackgold.org
cat.ryepubliclibrary.org
aacpl.aspendiscovery.org
acpl.us
prosper.aspendiscovery.org
ramapo-koha.aspendiscovery.org
clams.aspendiscovery.org
acpl.us
corvallis.aspendiscovery.org
prosper.aspendiscovery.org
blackgold.org
pasco.aspendiscovery.org
ainsworth.aspendiscovery.org
catalog.slolibrary.org
metrolibrary.aspendiscovery.org
payson.aspendiscovery.org
fayetteville.aspendiscovery.org
readokaloosa.org
catalog.dmpl.org
clams.aspendiscovery.org
catalog.losgatosca.gov
pcpls.aspendiscovery.org
aabrown.aspendiscovery.org
carnegiestout.aspendiscovery.org
catalog.ncwlibraries.org
blackgold.org
acpl.us
discover.knoxcountylibrary.org
abbott.aspendiscovery.org
fayetteville.aspendiscovery.org
acpl.us
clams.aspendiscovery.org
vokal-aspen.bywatersolutions.com
clams.aspendiscovery.org
maininc.aspendiscovery.org
catalog.eulesstx.gov
metroshare.aspendiscovery.org
pioneer.aspendiscovery.org
clams.aspendiscovery.org
abbotsford.aspendiscovery.org
gmilcs.aspendiscovery.org
metroshare.aspendiscovery.org
huntsville.aspendiscovery.org
catalog.ncwlibraries.org
rclstn.aspendiscovery.org
catalog.uintahlibrary.org
blackgold.org
epcounty.aspendiscovery.org
discover.knoxcountylibrary.org

Certificate

The complete raw certificate details for clams.aspendiscovery.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmVx1ngkBkcIrBENHGxx
pzFBG5R+514Wg5JNerRw7cBHq/vy+sRurrRudzfmVPgJ8i6rs9N1jvZkflzZvUrC
6e/vyAB5AVFYAasNzmxTob2HyWqbzNJ74gxC7qpeTvAgt8+MpvhKbdbwSTCSLwjy
OEyFRjoMfu4mGlbvMoZaX0+r9El67W2rUKyfOmLYbcyqmZI8bd9HCwmXJxNRsR5M
fND9SZx1mR59cNnQQNDAQGwvH7xCD+4848qabd8qfZkKGVnGFvOl3EHYLbTiQRDP
0Jra7zrad9nympHSjf2GCuuvUerwa+2Jd/LL2vKAmcauZ0DCa7hW2HwxqkOKEKwD
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 396274171862647779737747025699004539965993
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 05:02:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 05:02:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clams.aspendiscovery.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25045208618820637124012539447276980018775613133415189714488216089366729652714245125702609156433985457076117408507018031319594945081283254829145628502952290875041693008191172366607920271286232213046417891327605505118077590844232252423907033107664400051522303887223200870756205094886173858232924388112872290222118280633820462893040048664836665931138464124406656139449776346829276063798028369208878088113053449382066814750195953707481943654834258335381590078884859801631921896714235464838172836268227788718067222523716180647894430222673201472999294307658730806621681386419163004674352209165541986304500954542759675167551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86b18fc714c4061b60ea1ba108bf6417e8b095a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquinnah.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquinnah.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnstable-sturgis.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnstable.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bourne.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bourne.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brewster-ladies.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brewster.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cccc-wilkens.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccccwilkens.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerville.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerville.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatham-eldredge.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chilmark.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chilmark.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clams.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotuit.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotuit.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennis-east-jacob-sears.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennis-memorial.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennis-public.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennis-south.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennis-west.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennismemorial.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennispublic.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennissouth.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denniswest.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastham.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastham.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edgartown.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edgartown.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eldredge.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falmouth-public.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falmouth-west.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falmouthpublic.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falmouthwest.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harwich-brooks.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harwichbrooks.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyannis.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyannis.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacobsears.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidsclams.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lida.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marstons-mills.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mashpee.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mashpee.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmp.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nantucket-atheneum.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nantucket.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oak-bluffs.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oakbluffs.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orleans-snow.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osterville.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osterville.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provincetown.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provincetown.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snow.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truro.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truro.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vineyard-haven.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vineyardhaven.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellfleet.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellfleet.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'west-barnstable-whelden.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'west-tisbury.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westtisbury.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whelden.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woods-hole.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodshole.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarmouth-port.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarmouth-town.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarmouthport.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarmouthtown.aspendiscovery.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d919c82930000040300483046022100db9098a64db20c2f451630a0658cbbaf1086ddb348703d98f6bca6256429b8a6022100a7d79077ad98daa635489577352ca024123401a299d33458c93bf6f92deb084b007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d919c82c10000040300473045022024e0942d212219713db220a3feb9000f505ac265637487c6e29f331b5f3b169a022100ef0118bb45544f65828033cbf4e3f6d82337e8b1cff4fb1fa127be20344ea39e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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