achieve.engineering.asu.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:23:ac:b6:2a:bd:92:6a:e2:e8:73:c9:e2:cb:fa:7a:3e:8c was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=achieve.engineering.asu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:23:ac:b6:2a:bd:92:6a:e2:e8:73:c9:e2:cb:fa:7a:3e:8c
Serial Number (int): 360588599649457731774161282979424194150028
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6e:99:04:2a:05:dd:aa:0a:8e:52:78:86:a9:81:eb:0f:e8:a1:28:ab
Fingerprint (sha256): 26:7d:fb:14:4b:1a:a6:ac:d9:9c:17:66:eb:87:48:29:37:d9:bf:e7:93:5c:dd:8f:36:f1:fa:7e:25:e4:8d:79

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate achieve.engineering.asu.edu

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for achieve.engineering.asu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

achieve.engineering.asu.edu
admissions.kettering.edu
anniversaries.uahs.arizona.edu
appcamp.engineering.asu.edu
arch.utexas.edu
archive-mba.wharton.upenn.edu
asktico.lib.berkeley.edu
bigidea.rutgers.edu
brand.purdue.edu
broadway.playhousesquare.org
campaign.ucsc.edu
chancellorsearch.ucsc.edu
cimes.csbs.csusb.edu
costume.library.cornell.edu
ctc.sfsu.edu
dev1.si.umich.edu
developerdev.moodysanalytics.com
dmats.spcs.stanford.edu
dmats.stanford.edu
eis.washington.edu
elearning.med.utoronto.ca
esw.osu.edu
events-archive.ucsc.edu
exploringthecomplexity.ucdavis.edu
furiposters.engineering.asu.edu
geniustransitchallenge.ny.gov
heckerlab.arizona.edu
hello.engineering.asu.edu
info.extension.ucsb.edu
investors.mgmgrowthproperties.com
itcatalyst.sfsu.edu
jsat.ucdavis.edu
lambda.usc.edu
leap.ucdavis.edu
live-sas-strategic-plan.pantheon.sas.upenn.edu
live.ucdavis.edu
makinghistory.gwu.edu
missioncritical.wharton.upenn.edu
mtageniustransitchallenge.ny.gov
odee-pgmo.osu.edu
oist.ucsb.edu
online.asu.edu
ordbc.arizona.edu
osr-ops-test01.colorado.edu
partnership.gse.upenn.edu
pctc.washington.edu
peem.osu.edu
pmbasa.arizona.edu
polzlab.mit.edu
production.id.ucsb.edu
radsafe.berkeley.edu
regenerativemedicine.uahs.arizona.edu
rmp.rutgers.edu
scanme-gradstudies.ucdavis.edu
scilsresx.rutgers.edu
smtp.asc.upenn.edu
stanfordsummersession.stanford.edu
stg-blog.www.msit.io
techdigest.sagepub.com
test.cam.cornell.edu
test.mae.cornell.edu
test.mse.cornell.edu
tl.wvu.edu
trans.berkeley.edu
transportplan.rutgers.edu
tucsonprojectwet.arizona.edu
universityextension.ucdavis.edu
vpr.arizona.edu
webdev.colorado.edu
www.azspo.az.gov
www.brand.cce.cornell.edu
www.crwr.utexas.edu
www.docs.bigid.com
www.doem.washington.edu
www.ee.udel.edu
www.elearning.med.utoronto.ca
www.esc.rutgers.edu
www.extension.ucdavis.edu
www.gs.utexas.edu
www.hcii.cs.cmu.edu
www.iss.washington.edu
www.jhpiego.jhu.edu
www.leap.ucdavis.edu
www.neurology.utoronto.ca
www.odee-pgmo.osu.edu
www.ordbc.arizona.edu
www.pctc.washington.edu
www.rb.az.gov
www.reich.chem.ucsb.edu
www.scl.ece.ucsb.edu
www.summer.stanford.edu
www.tbsi.berkeley.edu
www.universityextension.ucdavis.edu
www.wanprc.washington.edu
www2.ccny.cuny.edu
yelab.ucsf.edu

Other certificates including the domain name asu.edu

(limited to 100 certificates)
discoverylabs.asu.edu
5734743547052032-fe3.pantheonsite.io
5631131353350144-fe1.pantheonsite.io
5681777339269120-fe1.pantheonsite.io
5757715179634688-fe2.pantheonsite.io
5638059940904960-fe3.pantheonsite.io
cbs.asu.edu
tutortrac.asu.edu
test-web-lws.edu.help
speechandhearingasu.com
asupharos1.asu.edu
5186145897938944-fe4.pantheonsite.io
5769623379116032-fe2.pantheonsite.io
carpepm.almonds.com
tools.clas.asu.edu
5176288276905984-fe4.pantheonsite.io
sni.cloudflaressl.com
5658044692168704-fe3.pantheonsite.io
5648867420798976-fe4.pantheonsite.io
5757715179634688-fe2.pantheonsite.io
5633267831144448-fe1.pantheonsite.io
hyl-app-dev02.asurite.ad.asu.edu
5702666986455040-fe2.pantheonsite.io
5631986051842048-fe1.pantheonsite.io
5638059940904960-fe3.pantheonsite.io
5712536552865792-fe3.pantheonsite.io
5642906408845312-fe3.pantheonsite.io
moodle.asu.edu
it.uahs.arizona.edu
5691878833913856-fe3.pantheonsite.io
osha.asu.edu
5186145897938944-fe4.pantheonsite.io
cen.engineering.asu.edu
5769720821186560-fe3.pantheonsite.io
5689792285114368-fe2.pantheonsite.io
5712536552865792-fe3.pantheonsite.io
staffcouncil.asu.edu
5702351037923328-fe2.pantheonsite.io
5663284820705280-fe3.pantheonsite.io
5702666986455040-fe2.pantheonsite.io
sni.cloudflaressl.com
5638059940904960-fe3.pantheonsite.io
sni.cloudflaressl.com
morrisoninstitute.asu.edu
5663284820705280-fe3.pantheonsite.io
5691420614590464-fe3.pantheonsite.io
5709068098338816-fe3.pantheonsite.io
nartc.fcm.arizona.edu
5752142325350400-fe1.pantheonsite.io
5730602795925504-fe1.pantheonsite.io
5730774057746432-fe4.pantheonsite.io
transportation.asu.edu
5763210187636736-fe2.pantheonsite.io
5633267831144448-fe1.pantheonsite.io
sfunder8cert.net
5707324073181184-fe2.pantheonsite.io
*.asu.edu
dlists.asu.edu
webhost80.asu.edu
5693341270278144-fe4.pantheonsite.io
5658962204557312-fe4.pantheonsite.io
5691878833913856-fe3.pantheonsite.io
5736907271045120-fe1.pantheonsite.io
worksite.asu.edu
dooraccess.biodesign.asu.edu
5691878833913856-fe3.pantheonsite.io
sni.cloudflaressl.com
5679846214598656-fe1.pantheonsite.io
5763210187636736-fe2.pantheonsite.io
5766466041282560-fe4.pantheonsite.io
5659822271758336-fe3.pantheonsite.io
dept-sql-n2.asurite.ad.asu.edu
5681904711892992-fe1.pantheonsite.io
jewishstudies.asu.edu
5769623379116032-fe2.pantheonsite.io
5689792285114368-fe2.pantheonsite.io
5736907271045120-fe1.pantheonsite.io
uconnectlabs.com
drupal.asu.edu
5709068098338816-fe3.pantheonsite.io
5731346630574080-fe3.pantheonsite.io
aria.asu.edu
5728757302165504-fe2.pantheonsite.io
5696381570252800-fe2.pantheonsite.io
5721489412194304-fe1.pantheonsite.io
5663284820705280-fe3.pantheonsite.io
banking-business-review.com
sni.cloudflaressl.com
cdn-test.battlefields.org
5734743547052032-fe3.pantheonsite.io
5683582030839808-fe1.pantheonsite.io
cholla.rc.asu.edu
sni.cloudflaressl.com
cad.asu.edu
5727517264576512-fe4.pantheonsite.io
thunderbird.asu.edu
5633267831144448-fe1.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
osha.asu.edu
fultonapps1.asu.edu

Certificate

The complete raw certificate details for achieve.engineering.asu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360588599649457731774161282979424194150028
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-14 04:37:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-12 04:37:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'achieve.engineering.asu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2302 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achieve.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admissions.kettering.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anniversaries.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appcamp.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arch.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive-mba.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asktico.lib.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigidea.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadway.playhousesquare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chancellorsearch.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimes.csbs.csusb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costume.library.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctc.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.si.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developerdev.moodysanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.spcs.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eis.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearning.med.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esw.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events-archive.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploringthecomplexity.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furiposters.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniustransitchallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heckerlab.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.extension.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.mgmgrowthproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcatalyst.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsat.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambda.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leap.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-sas-strategic-plan.pantheon.sas.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missioncritical.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtageniustransitchallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odee-pgmo.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oist.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordbc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osr-ops-test01.colorado.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnership.gse.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pctc.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peem.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmbasa.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polzlab.mit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.id.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsafe.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regenerativemedicine.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmp.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scanme-gradstudies.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scilsresx.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.asc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanfordsummersession.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-blog.www.msit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techdigest.sagepub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tl.wvu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trans.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transportplan.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tucsonprojectwet.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universityextension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpr.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdev.colorado.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azspo.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brand.cce.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crwr.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docs.bigid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doem.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ee.udel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elearning.med.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esc.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gs.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcii.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iss.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhpiego.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leap.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neurology.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odee-pgmo.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ordbc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pctc.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rb.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reich.chem.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scl.ece.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summer.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tbsi.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universityextension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wanprc.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yelab.ucsf.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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