yakamafish-star.net

Issued by R3

About this certificate

This digital certificate with serial number 03:c6:6e:31:0f:d8:85:ce:8f:66:be:73:47:e2:8b:bb:5e:2c was issued on by Let's Encrypt.

With 69 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=yakamafish-star.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c6:6e:31:0f:d8:85:ce:8f:66:be:73:47:e2:8b:bb:5e:2c
Serial Number (int): 328859236269099803038268018674609210220076
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 04:44:6a:c8:a3:19:d5:b1:4a:73:7c:58:7f:b7:f5:6c:39:01:b2:62
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9c:32:de:88:10:df:39:9e:33:db:4e:be:e1:74:ef:e7:09:bf:81:5e
Fingerprint (sha256): 2d:4f:4b:5a:93:71:2a:9a:b0:8b:8c:dc:0d:e1:32:f8:69:c2:d0:46:d3:6b:54:90:ff:3f:da:64:aa:f9:a9:be

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate yakamafish-star.net

69

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yakamafish-star.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alex.rcpd.msu.edu
asdf-hk1.trust.webdev.wustl.edu
backend-dev.americancouncils.org
badnar-lotre.dev.cms2.asa.uw.edu
bannext.rockhurst.edu
blackboard.nebrwesleyan.edu
bo-togel-terbesar.as-coa.org
bukumimpi.gsm.cornell.edu
cfr-map-nov-pr.cfr.org
cogito.umbc.edu
datasgp.gsm.cornell.edu
default.chemonics.com
devuploadgg-terbesar.as-coa.org
faculty.kettering.edu
global7.gsm.cornell.edu
heng-heng.gsm.cornell.edu
idnpoker.ampaconline.org
ini-buat-dev-macaubet.naeyc.org
ini-buat-test-macaubet.naeyc.org
iplf.archbalt.org
ips-tst.chop.edu
it.gsm.cornell.edu
joker-gaming.academic.gsm.cornell.edu
joker123.academic.gsm.cornell.edu
joker123.gsm.cornell.edu
joker123.platform01.tufts.edu
kimochi.conferences.psu.edu
kirkpatrickchoir.rutgers.edu
link-togel.ctd.northwestern.edu
live-draw-sdy.assumption.edu
live-legacy-auth.dailywire.com
lobby.dev.oceana.org
macaubet.naeyc.org
mahjong-ways.academic.gsm.cornell.edu
maxwin.gsm.cornell.edu
maxwin.platform01.tufts.edu
mix-parlay.connorsstate.edu
mixparlay.conferences.psu.edu
online.assumption.edu
osr-ops-test03.colorado.edu
pharmacy.th.ajc.org
pophealth.uahs.arizona.edu
prenursing.nebrwesleyan.edu
remote.cnsnews.com
rtp-live.ctd.northwestern.edu
rtp-live.gsm.cornell.edu
rtplive.gsm.cornell.edu
securitytips.blogs.govdelivery.com
situs-togel.test.webservices.umich.edu
situstoto.ty.th.ajc.org
slot-gacor.m.gsm.cornell.edu
slot-gacor.platform01.tufts.edu
slot-joker.academic.gsm.cornell.edu
slot-terbaru.todb.ca.gov
slot5000-devs.todb.ca.gov
slot5000-tests.todb.ca.gov
slot5000.todb.ca.gov
slotgacormaxwin.live.oceana.org
soe.conferences.psu.edu
staging.test.webservices.umich.edu
tesuploadssgg.as-coa.org
www.bannext.rockhurst.edu
www.comm.franklin.uga.edu
www.devoslab.franklinresearch.uga.edu
www.gmi.edu
www.iti.rutgers.edu
www.ling.franklin.uga.edu
www.tx.audubon.org
yakamafish-star.net

Other certificates including the domain name yakamafish-star.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for yakamafish-star.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw46iRMF7hwNtVI+uKl5U
F0CD5U3UkQMeBF8svfU9dGopQU40Ing2QVq1B+BFMG1Mn7ICzhEdYaQd/8z2o4yC
SvEOruHHbvRx9j8NrkB2VDdThoomFKEa0Ycr+N7Jt9BiGuqfFFcgkf3J61GgtdOf
eb3u1E1vLfFD14HJmJGlDtvFwp7KtZmSuKnUDvttZApeghzlw1S+QrS7sZo5epN5
As25V4MVnW5dTJFTfmhnbB9vkhJDh+O6DeLYszX0dSxVrsGI66gIDvk8vwZ1a2is
lILGQ2WDC/2oWV2R+PvWHZuUKqzLGtROWGuvZLR0QziNDryF+cVGICsOtMyOuvv4
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328859236269099803038268018674609210220076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-08 22:52:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-09 22:52:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yakamafish-star.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24686804846986700463286235473113579310640311389133520587690101062602581528438869452339616892952701902849061179936484875175962958584343852540185544183047237885328788321992471394861784671407872629842251491403749912828485536459849583589245555154424957554500881276697578384568150008763221433348736210875490343848174039032910683409070497266386346837523561884554602537558352214849828580677730541219147370984863199779155273255284942666036956568962165193514919553059246300356407560953783348314569168119667241859434381348711752591025577632034019588909291610597210916265772008296336673389410930207470033159467095714263857887333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04446ac8a319d5b14a737c587fb7f56c3901b262
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1910 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alex.rcpd.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asdf-hk1.trust.webdev.wustl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend-dev.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badnar-lotre.dev.cms2.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bannext.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackboard.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-togel-terbesar.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bukumimpi.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfr-map-nov-pr.cfr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogito.umbc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datasgp.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'default.chemonics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devuploadgg-terbesar.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faculty.kettering.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global7.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heng-heng.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idnpoker.ampaconline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ini-buat-dev-macaubet.naeyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ini-buat-test-macaubet.naeyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iplf.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ips-tst.chop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joker-gaming.academic.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joker123.academic.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joker123.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joker123.platform01.tufts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimochi.conferences.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirkpatrickchoir.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-togel.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-draw-sdy.assumption.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-legacy-auth.dailywire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lobby.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macaubet.naeyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahjong-ways.academic.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxwin.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxwin.platform01.tufts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mix-parlay.connorsstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mixparlay.conferences.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.assumption.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osr-ops-test03.colorado.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacy.th.ajc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pophealth.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prenursing.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.cnsnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtp-live.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtp-live.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtplive.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitytips.blogs.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situs-togel.test.webservices.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situstoto.ty.th.ajc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-gacor.m.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-gacor.platform01.tufts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-joker.academic.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-terbaru.todb.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot5000-devs.todb.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot5000-tests.todb.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot5000.todb.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slotgacormaxwin.live.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soe.conferences.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.test.webservices.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesuploadssgg.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bannext.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comm.franklin.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devoslab.franklinresearch.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmi.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iti.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ling.franklin.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tx.audubon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yakamafish-star.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186337255960000040300463044022071c41b0994184d6ecff5396cad062abd74114b5cd6d75fbc36c13475f9a992ee022004560c4ef5694e212a50e7d0e57078b2827a19db90ece92a575fe412a430aaca007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018633725580000004030046304402207db7f11996b9e9790b95d3c4ae415ca7baf8b0d7f2144e2c9964fa7e4ff9716b02205e951c51d614f2a18d7eda441c976faccde2049dbcea35ebf9b932df0236f4c4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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