lcthomsen.com

Issued by R3

About this certificate

This digital certificate with serial number 03:12:27:98:c0:77:1c:6c:da:4b:22:c9:1a:94:68:ef:4e:d3 was issued on by Let's Encrypt.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lcthomsen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:27:98:c0:77:1c:6c:da:4b:22:c9:1a:94:68:ef:4e:d3
Serial Number (int): 267514573424475333710498825800545127583443
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:a7:30:22:60:b8:bb:18:b0:b5:6f:68:a3:cc:39:72:13:cb:22:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d8:25:3d:2c:f7:f1:26:04:cb:da:96:d7:41:19:70:ab:9f:63:46:e2
Fingerprint (sha256): 24:7f:84:18:8d:3d:4f:ac:d8:11:22:ff:c3:68:d0:45:46:ad:78:f7:2b:89:85:26:1f:bf:93:51:56:3a:32:f0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lcthomsen.com

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lcthomsen.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adm-pprd.rockhurst.edu
arts-dev-pan.bloomfield.edu
astro.sfsu.edu
athlete.ufcespanol.com
baron.catholicreview.org
bo.ufcespanol.com
boostanz.reachlocal.com
camper.acacamps.org
cnr.mercy.edu
defender.olivecrest.org
education.gsm.cornell.edu
events.ufcespanol.com
gaya88.ufcespanol.com
global2.gsm.cornell.edu
halahueh.rockhurst.edu
key.gsm.cornell.edu
lcthomsen.com
like.themodern.org
meet.amsted.com
news.ufc.com.br
newyork-prod.adl.org
omaha-prod.adl.org
our.test.webservices.umich.edu
pg-soft.comstocksmag.com
project.courtinnovation.org
situs-toto.gsm.cornell.edu
slot-hoki.gsm.cornell.edu
slot-mpo-vip.aptana.com
slotnexus.govdelivery.com
sore.catholicreview.org
ssotest.entsoc.org
stage.awf.org
system.catholicreview.org
tastings.lhsf.ca
togel.jhpiego.org
toto.gsm.cornell.edu
whatsapp.waportal.org
wiki.jhpiego.org
wwe.govdelivery.com
www.agent.americanbakers.org
www.autism.unc.edu
www.fra-yes.org
www.gladstoneinstitutes.org
www.madrona.ecotrust.org
www.raw.gsm.cornell.edu
www.webscontact.rockhurst.edu
www.wiki.jhpiego.org
www2.aagrapevine.org

Other certificates including the domain name lcthomsen.com

(limited to 100 certificates)
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
5669845274198016-fe3.pantheonsite.io
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
5669845274198016-fe3.pantheonsite.io
5669845274198016-fe3.pantheonsite.io
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
5669845274198016-fe3.pantheonsite.io
5669845274198016-fe3.pantheonsite.io
sni234343.cloudflaressl.com
5669845274198016-fe3.pantheonsite.io
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
5669845274198016-fe3.pantheonsite.io
5669845274198016-fe3.pantheonsite.io
5669845274198016-fe3.pantheonsite.io
sni234343.cloudflaressl.com
lcthomsen.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
5669845274198016-fe3.pantheonsite.io
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
5669845274198016-fe3.pantheonsite.io
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
5669845274198016-fe3.pantheonsite.io
5669845274198016-fe3.pantheonsite.io
5669845274198016-fe3.pantheonsite.io
sni234343.cloudflaressl.com
5669845274198016-fe3.pantheonsite.io
sni234343.cloudflaressl.com
5669845274198016-fe3.pantheonsite.io
lcthomsen.com
webmail.lcthomsen.com
sni234343.cloudflaressl.com
webmail.lcthomsen.com
sni234343.cloudflaressl.com
5669845274198016-fe3.pantheonsite.io
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
5669845274198016-fe3.pantheonsite.io
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
5669845274198016-fe3.pantheonsite.io
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
5669845274198016-fe3.pantheonsite.io
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com
sni234343.cloudflaressl.com

Certificate

The complete raw certificate details for lcthomsen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSnemv0wZzcXAgMkBQX
ztwjNHFrHpIs5axrzzrdlw7T+GZAQLPiUvSZmF3ScRQ1Ni77M7wvvj8WKgEm6kmk
IGsqEr1NwVO/9M+bfL4ePy1ywV87Wx7ZOVVK4JWJMqctOtWZynJz3jX67Nda0+9B
++4/N4TAaLpUnxu83mMaTL+l/8yYin0iItxxZ3YRMvL8oMO9BWqFighCSszfIpRu
fGHjpEeodJZe7aLi7DcePvwyXZWi/al1YQeCdFkrpkcgk8myhP/APzQjk3bdKAlw
KQDdvQR4Y3b+bMJVibDWVrVqjLz+ybpaAJiOjKOmp9NDC6LZPJujVsE+mvYR8y2Z
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267514573424475333710498825800545127583443
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-27 13:21:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 13:21:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lcthomsen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295278889261962340330570593076765092564594026629510040566849443941721212705222905469227342749655760761925628146467776896918161669177237506061638055976839317974540229085566909601290432792766688540743857041618507082302908209321494362376641574366690514136936988276436757394515726000349835912320682069511736058985263380188984941851626522348036976567257123937402752130277851931257557691396509910741392947845349707974538616547869499133806197294376341097227039876415788275764051935080580783290065738507278734728703160147978353048962982659390140744073959855669537306275821116832669307766091573181749448001568724078979553621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							faa7302260b8bb18b0b56f68a3cc397213cb2214
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adm-pprd.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arts-dev-pan.bloomfield.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astro.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athlete.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baron.catholicreview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boostanz.reachlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camper.acacamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnr.mercy.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defender.olivecrest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaya88.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global2.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halahueh.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'key.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcthomsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'like.themodern.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.amsted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.ufc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyork-prod.adl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omaha-prod.adl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'our.test.webservices.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg-soft.comstocksmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project.courtinnovation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situs-toto.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-hoki.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-mpo-vip.aptana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slotnexus.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sore.catholicreview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssotest.entsoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.awf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'system.catholicreview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tastings.lhsf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togel.jhpiego.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toto.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsapp.waportal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.jhpiego.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwe.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agent.americanbakers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autism.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fra-yes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gladstoneinstitutes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madrona.ecotrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raw.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webscontact.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiki.jhpiego.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.aagrapevine.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d4b4bbe540000040300463044022065880841c8d9f0dc2df5e01390fa47506242e796cf9351bc4d7b837bef4c34790220291ce00db29224288db94770c80ef6fa11e79df1f1a665d05d9845a795e32e5b00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d4b4bbe6800000403004630440220112d6bfc86cec972e23ad2362147d3133eeba0681532448290ff62899059590b022058cd581ba7c0fc8ef345bb9caee3e9adc0e4c5c892b105c1998269a7920f51ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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