swfwmd.state.fl.us

Issued by R3

About this certificate

This digital certificate with serial number 03:2c:8c:d4:60:01:f1:8c:e8:9a:a8:ac:c0:4c:a5:13:01:66 was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=swfwmd.state.fl.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2c:8c:d4:60:01:f1:8c:e8:9a:a8:ac:c0:4c:a5:13:01:66
Serial Number (int): 276496476573411236286422254848472375296358
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bd:c9:98:22:41:9d:f6:5c:7f:bd:d0:db:44:e3:87:0f:03:86:62:2b
Fingerprint (sha256): 25:9a:cd:62:c0:d8:8e:39:c3:18:36:03:05:08:3d:57:d1:4c:50:26:99:ca:e7:72:2c:7f:57:c4:fd:7e:05:7c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate swfwmd.state.fl.us

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for swfwmd.state.fl.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

swfwmd.state.fl.us
t.wholegrainscouncil.org
tango.franklin.uga.edu
test-web-lws.edu.help
test-wp.nationalreview.com
test.2.www.upenn.edu
test.aep.cornell.edu
test.cam.cornell.edu
test.cee.cornell.edu
test.ethics3.pantheon.berkeley.edu
test.finance.upenn.edu
test.mae.cornell.edu
test.mse.cornell.edu
test.ocio.osu.edu
test.radcliffe.edu
test.slp.gse.upenn.edu
test.thedoorway.nh.gov
test.utrp.gse.upenn.edu
testb.test.uis.georgetown.edu
testsite1.dev.cms1.asa.uw.edu
tl.wvu.edu
townofdiscoverybay.ca.gov
townsendlab.berkeley.edu
transitions.metrotech.edu
trustees365.thetrustees.org
tst.dhsri.yale.edu
tst.ergo.yale.edu
tst.laffertylab.yale.edu
tst.odonnelllab.research.yale.edu
uhi.human.cornell.edu
updates.cjei.cornell.edu
updates.cpra.cornell.edu
upenn-it.asc.upenn.edu
victory.osu.edu
virtual2.unlv.edu
vmusa.corpny.restorationplaza.org
vpr.arizona.edu
wanprc.washington.edu
wccs.goto.fish
webdev.colorado.edu
website.wells.edu
websiteservices.watech.wa.gov
webtest.tsu.edu
wireless.unlv.edu
wissc.arizona.edu
wp.americancouncils.org
wp.mwcc.edu
ww.thetrustees.org
www-chem.umd.edu
www.acims.arizona.edu
www.adobe.arizona.edu
www.advising.arizona.edu
www.alumni.dartmouth.edu
www.apac.arizona.edu
www.archydro.crwr.utexas.edu
www.azcc.arizona.edu
www.azspo.az.gov
www.beta-engineering.princeton.edu
www.blackbearcoffee.com
www.blogs.earthjustice.org
www.bodywerks-medspa.com
www.cbs.asu.edu
www.cie.ucdavis.edu
www.crwr.utexas.edu
www.cybersecurity.umass.edu
www.datahero.com
www.design-engineering.princeton.edu
www.diplomacy.state.gov
www.dl.odu.edu
www.drraxa.com
www.earlymodernenglishdrama.folger.edu
www.ee.udel.edu
www.ein.az.gov
www.esc.rutgers.edu
www.eventsinfo.presidio.edu
www.extension.ucdavis.edu
www.financialaid.arizona.edu
www.fra-yes.org
www.gim.utoronto.ca
www.giving.dartmouth.edu
www.grrc.az.gov
www.gs.utexas.edu
www.hcii.cs.cmu.edu
www.heritagepointewarren.org
www.ihe.uga.edu
www.inas2.uga.edu
www.internationaladmissions.arizona.edu
www.italianacademy.columbia.edu
www.jhpiego.jhu.edu
www.koutures.com
www.lgcr.com

Other certificates including the domain name state.fl.us

(limited to 100 certificates)
5759522421342208-fe1.pantheonsite.io
*.dot.state.fl.us
osd.dms.state.fl.us
nartc.fcm.arizona.edu
5761253830033408-fe3.pantheonsite.io
fchr.state.fl.us
*.fvrs.dos.state.fl.us
epermitting.nwfwmd.state.fl.us
*.leg.state.fl.us
dhsmv.to.dot.state.fl.us
*.dot.state.fl.us
5759522421342208-fe1.pantheonsite.io
phinms.doh.state.fl.us
5761253830033408-fe3.pantheonsite.io
epermitting.nwfwmd.state.fl.us
5759522421342208-fe1.pantheonsite.io
5761253830033408-fe3.pantheonsite.io
5761253830033408-fe3.pantheonsite.io
NWRDCDCX01.fdorext.dor.state.fl.us
phinms.doh.state.fl.us
5726607939469312-fe3.pantheonsite.io
5759522421342208-fe1.pantheonsite.io
dui.hsmv.state.fl.us
*.dot.state.fl.us
www.dms.myflorida.com
*.dot.state.fl.us
wwwwmis11a.swfwmd.state.fl.us
research-pp.stonybrook.edu
5759522421342208-fe1.pantheonsite.io
fpcweb.fpc.state.fl.us
dui.hsmv.state.fl.us
*.leg.state.fl.us
dep.state.fl.us
*.dot.state.fl.us
5726607939469312-fe3.pantheonsite.io
depremote2.dep.state.fl.us
remote.nwfwmd.state.fl.us
www6.flhsmv.gov
secure2.leg.state.fl.us
fpcweb.fpc.state.fl.us
taxapp2.state.fl.us
*.dcf.state.fl.us
quarantine.leg.state.fl.us
ahca.myflorida.com
info-dev.calperformances.org
*.state.fl.us
www.doah.state.fl.us
dui.hsmv.state.fl.us
5759522421342208-fe1.pantheonsite.io
osd.dms.state.fl.us
5726607939469312-fe3.pantheonsite.io
*.dot.state.fl.us
fchr.state.fl.us
5761253830033408-fe3.pantheonsite.io
expeditions.sandiegozoo.org
qa.californiasciencecenter.ca.gov
*.dcf.state.fl.us
vpn.swfwmd.state.fl.us
pb-acs-a.leg.state.fl.us
tpamail.swfwmd.state.fl.us
www.swfwmd.state.fl.us
adfs.djj.state.fl.us
www19.swfwmd.state.fl.us
5759522421342208-fe1.pantheonsite.io
fdacs.ccplatform.net
cjnetdev.djj.state.fl.us
sunoas.doacs.state.fl.us
m.ajc.org
*.fdor.dor.state.fl.us
www.flaes.org
*.dot.state.fl.us
*.dot.state.fl.us
ww2.oppaga.state.fl.us
fdva-lg-exch.fdva.state.fl.us
attach.dbpr.state.fl.us
*.dbpr.state.fl.us
portal1.nwfwmd.state.fl.us
secure3.leg.state.fl.us
www.freshfromflorida.com
wwwvmwmis02a.swfwmd.state.fl.us
bkvctxecag03.swfwmd.state.fl.us
vsp.dbpr.state.fl.us
*.rol.frs.state.fl.us
cjnetdev.djj.state.fl.us
esbdev01.swfwmd.state.fl.us
5726607939469312-fe3.pantheonsite.io
geodata.dep.state.fl.us
www.dms.myflorida.com
5759522421342208-fe1.pantheonsite.io
*.dot.state.fl.us
fdordirect-nls.fdor.dor.state.fl.us
*.dcf.state.fl.us
*.dot.state.fl.us
epermappsdev01.swfwmd.state.fl.us
www.freshfromflorida.com
5761253830033408-fe3.pantheonsite.io
5761253830033408-fe3.pantheonsite.io
5759522421342208-fe1.pantheonsite.io
www12.swfwmd.state.fl.us
www28.swfwmd.state.fl.us

Certificate

The complete raw certificate details for swfwmd.state.fl.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276496476573411236286422254848472375296358
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-09 13:55:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-07 13:55:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'swfwmd.state.fl.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swfwmd.state.fl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.wholegrainscouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tango.franklin.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-web-lws.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-wp.nationalreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.2.www.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cee.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ethics3.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.finance.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ocio.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.radcliffe.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.slp.gse.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.thedoorway.nh.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.utrp.gse.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testb.test.uis.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testsite1.dev.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tl.wvu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townofdiscoverybay.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townsendlab.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transitions.metrotech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustees365.thetrustees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.dhsri.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.ergo.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.laffertylab.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.odonnelllab.research.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhi.human.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.cjei.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.cpra.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upenn-it.asc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victory.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtual2.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmusa.corpny.restorationplaza.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpr.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanprc.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wccs.goto.fish'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdev.colorado.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'website.wells.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websiteservices.watech.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtest.tsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wireless.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wissc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.mwcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.thetrustees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-chem.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acims.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adobe.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advising.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni.dartmouth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apac.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archydro.crwr.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azcc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azspo.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beta-engineering.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackbearcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blogs.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodywerks-medspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbs.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cie.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crwr.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cybersecurity.umass.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datahero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.design-engineering.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diplomacy.state.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dl.odu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drraxa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earlymodernenglishdrama.folger.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ee.udel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ein.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esc.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eventsinfo.presidio.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financialaid.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fra-yes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gim.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giving.dartmouth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grrc.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gs.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcii.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heritagepointewarren.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihe.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inas2.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internationaladmissions.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.italianacademy.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhpiego.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koutures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lgcr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000183bd3ee6c800000403004730450220520a62f5c70ab5dcf7de65a5479b7af3b68ecf5206aca9a6a13c188142374fb8022100fb21058accc51c3aa97b68aa36963fc1f74ae932d0dc3c4c36e20383676780fb007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000183bd3ee88d00000403004630440220389b17eba0d1c78cf734a6d86e81eadf6edf3945a230c8d9875d51e37904e172022026bc31c59735877c5b3118afeaaf2f6b7163f4c882c17afe6964f8390814c747
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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