international.dev.oceana.org

Issued by R3

About this certificate

This digital certificate with serial number 04:f4:27:22:c9:0c:7e:6f:56:89:8a:f3:df:28:56:63:83:e9 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=international.dev.oceana.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:f4:27:22:c9:0c:7e:6f:56:89:8a:f3:df:28:56:63:83:e9
Serial Number (int): 431530061763432971569562748759374582481897
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 40:15:87:f2:6c:fe:44:32:65:ce:c4:c6:1b:2c:ff:e5:cc:6b:90:04
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a8:c6:af:50:67:34:7a:97:62:18:b4:b4:42:ee:69:67:a9:45:de:6a
Fingerprint (sha256): 36:22:14:9c:dd:5f:c4:be:df:84:ae:d2:55:7c:43:de:71:54:4d:10:0a:39:5f:17:14:2d:a9:5d:36:d7:80:e4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate international.dev.oceana.org

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for international.dev.oceana.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

international.dev.oceana.org
internetcouncil.nacha.org
intranet.olivecrest.org
investors.mgmgrowthproperties.com
ip.earthjustice.org
ip.govdelivery.com
ipv6.earthjustice.org
ipv6.govdelivery.com
it-chat.web.arizona.edu
it.22squared.com
it.uahs.arizona.edu
japan.fia.org
jlinks.govdelivery.com
jml1.earthjustice.org
job.earthjustice.org
jobs.earthjustice.org
jp.mcny.org
jss-dc3.govdelivery.com
junk.dana.org
junk2.dana.org
jwplayer.essence.com
k8s.earthjustice.org
kamunanya.gaje.ethics3.pantheon.berkeley.edu
kgqm.kjzz.org
kubernetes.govdelivery.com
laborlabsandbox.aflcio.org
landing.pacific.edu
law.ss.pacific.edu
ldap.cscc.unc.edu
liberalarts.ss.pacific.edu
libre.estadio.com
lindsay.mcny.org
live-orientation.pantheon.io
live.aep.cornell.edu
live.bme.cornell.edu
live.cam.cornell.edu
live.mcgeorge.edu
live.ophd.pantheon.berkeley.edu
live.ucdavis.edu
m.voiceofsandiego.org
makinghistory.gwu.edu
marketing.magicsoftware.com
mediaroom.livestrong.org
memberauth.audiology.org
microsites.globalwaters.org
mobilize.medika.life
msa2016.berkeley.edu
multidev1.gc.cuny.edu
nartc.fcm.arizona.edu
nartechedge.nar.realtor
news.catholicschoolsbq.org
newsite.as-coa.org
next.warnerpacific.edu
noticias.lared.cl
null.actorsfund.org
odl.rutgers.edu
oksy.fronterasdesk.org
old.gistnetwork.org
oldsite.itu.edu
om.sterling.edu
online.foodsafety.msu.edu
organize.thetrustees.org
pharmacy.ss.pacific.edu
pianolive.americamagazine.org
ppr.erdf.appcelerator.com
preview.dfa.cornell.edu
prod-www.chop.edu
programs.alvernia.edu
ps-pantheon.umdearborn.edu
psp.sandiegozoo.org
querybuilder.appcelerator.com
radsafe.berkeley.edu
rc.library.osu.edu
redesignhealthcare.mclaren.org
redirects.policy.cornell.edu
religion.berkeley.edu
requestgem.business.ucdenver.edu
resx.usc.edu
reweb.archbalt.org
rgd2020.rutgers.edu
rheumatology.utoronto.ca
rmp.rutgers.edu
rpgp.berkeley.edu
rstinstruments.rstinstruments.com
rstinstrumentsinfo.rstinstruments.com
ruby-staging.vilcek.org
scilsresx.rutgers.edu
sdgs-staging.scout.org
secure.tu.org
sexgenderlab.human.cornell.edu
slot.pbn-a56.rockhurst.edu
smtp.commonsensemedia.org
social.davidson.edu
sourceu.warnerpacific.edu
stage.onlineeducation.psu.edu
staging-na.altran.com

Other certificates including the domain name oceana.org

(limited to 100 certificates)
5732312192909312-fe3.pantheonsite.io
5724466092965888-fe4.pantheonsite.io
5663284820705280-fe3.pantheonsite.io
5667609047465984-fe2.pantheonsite.io
5663284820705280-fe3.pantheonsite.io
calendar.sdzsafaripark.org
5746821397741568-fe3.pantheonsite.io
3fadmin.govdelivery.com
asu.ksby.com
streetfilms.org
5663284820705280-fe3.pantheonsite.io
5742636757417984-fe1.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
oceana.org
5663284820705280-fe3.pantheonsite.io
5663284820705280-fe3.pantheonsite.io
5738275486564352-fe1.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
5732312192909312-fe3.pantheonsite.io
5736592127819776-fe3.pantheonsite.io
5653041055268864-fe3.pantheonsite.io
5646239437684736-fe3.pantheonsite.io
5667609047465984-fe2.pantheonsite.io
5653041055268864-fe3.pantheonsite.io
about-mdev.jstor.org
yakamafish-star.net
5653041055268864-fe3.pantheonsite.io
5738600293466112-fe1.pantheonsite.io
5677350838599680-fe1.pantheonsite.io
5732312192909312-fe3.pantheonsite.io
agd.nebrwesleyan.edu
5667609047465984-fe2.pantheonsite.io
5724466092965888-fe4.pantheonsite.io
streetfilms.org
good.gsm.cornell.edu
agd.nebrwesleyan.edu
5653041055268864-fe3.pantheonsite.io
5738275486564352-fe1.pantheonsite.io
5677350838599680-fe1.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
5736592127819776-fe3.pantheonsite.io
5667609047465984-fe2.pantheonsite.io
academi.ufc.com
host2.openminds.com
local3599.com
5724466092965888-fe4.pantheonsite.io
plastics.oceana.org
5647591547076608-fe1.pantheonsite.io
5653041055268864-fe3.pantheonsite.io
5738275486564352-fe1.pantheonsite.io
communityadvancementfirm.com
5673385510043648-fe4.pantheonsite.io
5653041055268864-fe3.pantheonsite.io
5647591547076608-fe1.pantheonsite.io
5742636757417984-fe1.pantheonsite.io
5646239437684736-fe3.pantheonsite.io
5738600293466112-fe1.pantheonsite.io
5663284820705280-fe3.pantheonsite.io
5738275486564352-fe1.pantheonsite.io
5742636757417984-fe1.pantheonsite.io
5738275486564352-fe1.pantheonsite.io
5738600293466112-fe1.pantheonsite.io
5732312192909312-fe3.pantheonsite.io
71.ufc.com
5732312192909312-fe3.pantheonsite.io
ssl2662.cloudflare.com
5746821397741568-fe3.pantheonsite.io
5738275486564352-fe1.pantheonsite.io
5732312192909312-fe3.pantheonsite.io
2fadmin.govdelivery.com
agd.nebrwesleyan.edu
5724466092965888-fe4.pantheonsite.io
5677350838599680-fe1.pantheonsite.io
ssl2662.cloudflare.com
5738275486564352-fe1.pantheonsite.io
5653041055268864-fe3.pantheonsite.io
5724466092965888-fe4.pantheonsite.io
5746821397741568-fe3.pantheonsite.io
5724466092965888-fe4.pantheonsite.io
5653041055268864-fe3.pantheonsite.io
5647591547076608-fe1.pantheonsite.io
5732312192909312-fe3.pantheonsite.io
5663284820705280-fe3.pantheonsite.io
5738275486564352-fe1.pantheonsite.io
inside.gc.cuny.edu
5677350838599680-fe1.pantheonsite.io
www-default.actionkit.com
5724466092965888-fe4.pantheonsite.io
5746821397741568-fe3.pantheonsite.io
5746821397741568-fe3.pantheonsite.io
5663284820705280-fe3.pantheonsite.io
abong.ufcespanol.com
5738275486564352-fe1.pantheonsite.io
act.represent.us
5653041055268864-fe3.pantheonsite.io
5663284820705280-fe3.pantheonsite.io
5646239437684736-fe3.pantheonsite.io
5738600293466112-fe1.pantheonsite.io
5667609047465984-fe2.pantheonsite.io
5646239437684736-fe3.pantheonsite.io

Certificate

The complete raw certificate details for international.dev.oceana.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN15oeaas7UjHG17MrMh
Q0Wh+CPXZQe7WRP47PAWoedjUK9tGOY6MP7G6UG5NMWPd73SGDn2LBnc/U/GcWL3
mGtC5M47KhkZs2HbGImTA7SJiw5JueIw8enznhwgwDzmBleAG0Qg9s/RSFmw0e7y
4CqxOa6flamd0weNup4ktrv5IAFkwb5SNCMlFNWXyu4cJCUtUdnEX0lpTPSIK/uT
6voCDiEdXxnl15TTS2A8OYkhGyhvGxL9hYDS2uvR53Je7hbuCqGkUZaSed2/r42M
IqHw1nN4GC0lGGISh2CQvH9gtOb6LYHTwAD2yty1t4gTMplxLHFDdwPpa2d+RFkn
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431530061763432971569562748759374582481897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 05:08:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-19 05:08:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'international.dev.oceana.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19297435810238244716322818920723853065064000181636968677920963740423679467601771166356730853590795188821373840577059371332747157619118677845787444284776264710750238633761123429788490529324370144620058406544174541958557396000558843607264593798701877777042297312401561008527069122385489941178730955074494395103590191520659337941993973632303456617273170090303164783362414637609442992705096806592110449151380255208978491086244425284950374539928179459907084901982405264983978155263287133961632659384813749624645833985516414570607834761519187920636763888682777225455843864929898099360676518408971116553929404277897094047743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							401587f26cfe443265cec4c61b2cffe5cc6b9004
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2289 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetcouncil.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.olivecrest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.mgmgrowthproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ip.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ip.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv6.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv6.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-chat.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.22squared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japan.fia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlinks.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jml1.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'job.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jss-dc3.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junk.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junk2.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwplayer.essence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k8s.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamunanya.gaje.ethics3.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kgqm.kjzz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubernetes.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laborlabsandbox.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldap.cscc.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberalarts.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libre.estadio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindsay.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-orientation.pantheon.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.bme.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.mcgeorge.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.voiceofsandiego.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.magicsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaroom.livestrong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memberauth.audiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsites.globalwaters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilize.medika.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msa2016.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multidev1.gc.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartechedge.nar.realtor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.catholicschoolsbq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsite.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.warnerpacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noticias.lared.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'null.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odl.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oksy.fronterasdesk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.gistnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldsite.itu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'om.sterling.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.foodsafety.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organize.thetrustees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacy.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianolive.americamagazine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppr.erdf.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.dfa.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-www.chop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programs.alvernia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-pantheon.umdearborn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psp.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'querybuilder.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsafe.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.library.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redesignhealthcare.mclaren.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirects.policy.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religion.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'requestgem.business.ucdenver.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reweb.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgd2020.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmp.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpgp.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstruments.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstrumentsinfo.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruby-staging.vilcek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scilsresx.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdgs-staging.scout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexgenderlab.human.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot.pbn-a56.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.commonsensemedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.davidson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourceu.warnerpacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-na.altran.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018efa1f3dcd000004030046304402205141227333e41e4024bbf3c58c9af02560e3027bb18fd9fc4546638c890af51002202114a836f4425aee60e146216386828ce65240e73cbcd1ca4d2f4f2edc92e2d5007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018efa1f3e890000040300473045022100de2069323d188b269c0f2511381285bf99608cc56daafe37e1517870fbcb58a4022046f935b1d761c8615b06daf0ce69a765f527409336dde6a14520a3983ac75eee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00132b3766fe60e1cc0d9d4cdd56d8d0b57aaafedbec90a7ab63b33761bda5d61f1490b0d6acc947b4165eef33097565988a3c2cdd9a220d9bff39301a7e83ab99dd30e9b366e51726fcf02b1fc3d421ef53ba565f7a4aa172c00d7cb504253cf42b392216b9b8e35b5e18c09eb7b1bd64ccd49368765d54d8cacdb678dced51f03dcef51448965b83a92f0a582a94737071183a091615093a04a406cda3560bdabcc0ea58b6d8683873660055f6d8463e61144ce05cdb9ad1d297d369225fec1b0ac006a480497da3e2d54de49589c50af59cd268cef95007b3053ebc7c8db36a5bbc8897dacf9344776b501456af9a774483f6cb37754dcfa1a67eded0f19be9