m.ajc.org

Issued by R3

About this certificate

This digital certificate with serial number 04:c9:c5:f8:39:08:ad:ed:23:9e:bd:91:58:3b:cc:46:16:0b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=m.ajc.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c9:c5:f8:39:08:ad:ed:23:9e:bd:91:58:3b:cc:46:16:0b
Serial Number (int): 417109046239725163105436562147868737410571
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 04:44:6a:c8:a3:19:d5:b1:4a:73:7c:58:7f:b7:f5:6c:39:01:b2:62
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 43:3a:ab:c5:c2:4b:aa:f8:d5:d0:0d:6a:8d:da:7e:00:ef:f6:9d:db
Fingerprint (sha256): 36:8f:1e:98:fb:e9:aa:5e:c3:cd:6b:2c:7f:14:f4:f9:5d:f0:b6:51:43:4b:da:d7:0d:80:27:3e:c8:ea:ff:b0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate m.ajc.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for m.ajc.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

m.ajc.org
m.qsrmagazine.com
m.voiceofsandiego.org
magazine.merrimack.edu
mailams.ustelecom.org
makinghistory.gwu.edu
marketing.magicsoftware.com
marketingprojects.maryville.edu
mediaroom.livestrong.org
memberauth.audiology.org
microsites.globalwaters.org
mobile.ajc.org
mobilize.medika.life
msa2016.berkeley.edu
mtageniustransitchallenge.ny.gov
multidev1.gc.cuny.edu
nacopn3.naco.org
nartc.fcm.arizona.edu
nartechedge.nar.realtor
news.catholicschoolsbq.org
news.religionnews.com
newsite.as-coa.org
newsite.dev.cms1.asa.uw.edu
next.warnerpacific.edu
noticias.lared.cl
nrrss.ced.berkeley.edu
null.actorsfund.org
nyild.unionderm.com
odl.rutgers.edu
oksy.fronterasdesk.org
old.gistnetwork.org
oldsite.itu.edu
om.sterling.edu
online.foodsafety.msu.edu
origin-dev-gcms.absolut.com
our2.test.cms1.asa.uw.edu
partners.starleaf.com
parttime.carey.jhu.edu
pattaya.dev.cms1.asa.uw.edu
personalfinance.multidevcom.uaf.edu
pharmacy.ss.pacific.edu
pianolive.americamagazine.org
pophealth.uahs.arizona.edu
post-wp.religionnews.com
powertest.ctd.northwestern.edu
ppd-staging.sfsu.edu
ppr.erdf.appcelerator.com
pragmatic.ufc.com
preview.dfa.cornell.edu
prod-www.chop.edu
programs.alvernia.edu
programs.carey.jhu.edu
ps-pantheon.umdearborn.edu
psp.sandiegozoo.org
pubsrv.eforms.asu.edu
qa.californiasciencecenter.ca.gov
querybuilder.appcelerator.com
racismharmshealth.berkeley.edu
radiology.virginia.edu
radsafe.berkeley.edu
rc.library.osu.edu
recovery-gse.berkeley.edu
redesignhealthcare.mclaren.org
redirects.policy.cornell.edu
regenerativemedicine.uahs.arizona.edu
religion.berkeley.edu
requestgem.business.ucdenver.edu
resx.usc.edu
reweb.archbalt.org
rgd2020.rutgers.edu
rheumatology.utoronto.ca
rmp.rutgers.edu
rntobsnonlineprograms.adu.edu
rpgp.berkeley.edu
rstinstruments.rstinstruments.com
rstinstrumentsinfo.rstinstruments.com
ruby-staging.vilcek.org
sbobet.ufc.com
sbobet88.ufc.com
scilsresx.rutgers.edu
sdgs-staging.scout.org
secure.tu.org
servicelearning.csustan.edu
sexgenderlab.human.cornell.edu
slot.pbn-a56.rockhurst.edu
slot.ufc.com
slot88-resmi.ufc.com
slot88.vivote.gov
slotgacor.ctd.northwestern.edu
slotonline.todb.ca.gov
smagent.ctd.northwestern.edu
smartdigitalphotography.multidevcom.uaf.edu
smtp.commonsensemedia.org
social.davidson.edu
sore.actorsfund.org
sourceu.warnerpacific.edu
ssa.blogs.govdelivery.com
stage.onlineeducation.psu.edu
staging-na.altran.com
staging.freedomworks.org

Other certificates including the domain name ajc.org

(limited to 100 certificates)
it.uahs.arizona.edu
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
hub.meed.com
yakamafish-star.net
5673385510043648-fe4.pantheonsite.io
live.ucdavis.edu
5673385510043648-fe4.pantheonsite.io
actnow.ajc.org
liberalarts.ss.pacific.edu
dev.embody.yale.edu
expeditions.sandiegozoo.org
5673385510043648-fe4.pantheonsite.io
test.ajc.org
host2.openminds.com
m.ajc.org
5673385510043648-fe4.pantheonsite.io
live.bme.cornell.edu
labellelab.asu.edu
5673385510043648-fe4.pantheonsite.io
legacy.hq.philabundance.org
inside.gc.cuny.edu
spamtitan.ajc.org
global.ajc.org
ajc.org
live.ophd.pantheon.berkeley.edu
www.gospringboard.com
global.ajc.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
global.ajc.org
global.ajc.org
global.ajc.org
yakamafish-star.net
5673385510043648-fe4.pantheonsite.io
liberalarts.ss.pacific.edu
live.ucdavis.edu
lp.programs.carey.jhu.edu.help
ajc.org
intranet.olivecrest.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
lp.grad.online.udel.edu.help
laborlabsandbox.aflcio.org
dev.dhsri.yale.edu
industri40.ida.dk
info-dev.calperformances.org
5673385510043648-fe4.pantheonsite.io
internal.gcir.org
lawebmail.ajc.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
international.research.ucsb.edu
ajc.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
csc.arizona.edu
yakamafish-star.net
csc.arizona.edu
international.research.ucsb.edu
dev.dhsri.yale.edu
ajc.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
live.ophd.pantheon.berkeley.edu
m.ajc.org
live.ucdavis.edu
5673385510043648-fe4.pantheonsite.io
libre.estadio.com
dev-lp-jhubsph.edu.help
yakamafish-star.net
ipv6.earthjustice.org
design-engineering.princeton.edu
dev-web-degacc.edu.help
global.ajc.org
dev-web-degacc.edu.help
sslvpnny.ajc.org
gws-uat.earthjustice.org
5673385510043648-fe4.pantheonsite.io
it-chat.web.arizona.edu
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
host2.cenmi.org
5673385510043648-fe4.pantheonsite.io
dcwebmail.ajc.org
5673385510043648-fe4.pantheonsite.io
test.ajc.org
spamtitan.ajc.org
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
dev.cmsi.gse.upenn.edu
5673385510043648-fe4.pantheonsite.io
info.vcfa.edu
5673385510043648-fe4.pantheonsite.io
5673385510043648-fe4.pantheonsite.io
global.ajc.org
lambda.usc.edu
5673385510043648-fe4.pantheonsite.io

Certificate

The complete raw certificate details for m.ajc.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOzzCCDbegAwIBAgISBMnF+DkIre0jnr2RWDvMRhYLMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAxMTUxMDU1NDlaFw0yMzA0MTUxMDU1NDhaMBQxEjAQBgNVBAMT
CW0uYWpjLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMOOokTB
e4cDbVSPripeVBdAg+VN1JEDHgRfLL31PXRqKUFONCJ4NkFatQfgRTBtTJ+yAs4R
HWGkHf/M9qOMgkrxDq7hx270cfY/Da5AdlQ3U4aKJhShGtGHK/jeybfQYhrqnxRX
IJH9yetRoLXTn3m97tRNby3xQ9eByZiRpQ7bxcKeyrWZkrip1A77bWQKXoIc5cNU
vkK0u7GaOXqTeQLNuVeDFZ1uXUyRU35oZ2wfb5ISQ4fjug3i2LM19HUsVa7BiOuo
CA75PL8GdWtorJSCxkNlgwv9qFldkfj71h2blCqsyxrUTlhrr2S0dEM4jQ68hfnF
RiArDrTMjrr7+GUCAwEAAaOCC/swggv3MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
BERqyKMZ1bFKc3xYf7f1bDkBsmIwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v
nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s
ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggnK
BgNVHREEggnBMIIJvYIJbS5hamMub3JnghFtLnFzcm1hZ2F6aW5lLmNvbYIVbS52
b2ljZW9mc2FuZGllZ28ub3JnghZtYWdhemluZS5tZXJyaW1hY2suZWR1ghVtYWls
YW1zLnVzdGVsZWNvbS5vcmeCFW1ha2luZ2hpc3RvcnkuZ3d1LmVkdYIbbWFya2V0
aW5nLm1hZ2ljc29mdHdhcmUuY29tgh9tYXJrZXRpbmdwcm9qZWN0cy5tYXJ5dmls
bGUuZWR1ghhtZWRpYXJvb20ubGl2ZXN0cm9uZy5vcmeCGG1lbWJlcmF1dGguYXVk
aW9sb2d5Lm9yZ4IbbWljcm9zaXRlcy5nbG9iYWx3YXRlcnMub3Jngg5tb2JpbGUu
YWpjLm9yZ4IUbW9iaWxpemUubWVkaWthLmxpZmWCFG1zYTIwMTYuYmVya2VsZXku
ZWR1giBtdGFnZW5pdXN0cmFuc2l0Y2hhbGxlbmdlLm55LmdvdoIVbXVsdGlkZXYx
LmdjLmN1bnkuZWR1ghBuYWNvcG4zLm5hY28ub3JnghVuYXJ0Yy5mY20uYXJpem9u
YS5lZHWCF25hcnRlY2hlZGdlLm5hci5yZWFsdG9yghpuZXdzLmNhdGhvbGljc2No
b29sc2JxLm9yZ4IVbmV3cy5yZWxpZ2lvbm5ld3MuY29tghJuZXdzaXRlLmFzLWNv
YS5vcmeCG25ld3NpdGUuZGV2LmNtczEuYXNhLnV3LmVkdYIWbmV4dC53YXJuZXJw
YWNpZmljLmVkdYIRbm90aWNpYXMubGFyZWQuY2yCFm5ycnNzLmNlZC5iZXJrZWxl
eS5lZHWCE251bGwuYWN0b3JzZnVuZC5vcmeCE255aWxkLnVuaW9uZGVybS5jb22C
D29kbC5ydXRnZXJzLmVkdYIWb2tzeS5mcm9udGVyYXNkZXNrLm9yZ4ITb2xkLmdp
c3RuZXR3b3JrLm9yZ4IPb2xkc2l0ZS5pdHUuZWR1gg9vbS5zdGVybGluZy5lZHWC
GW9ubGluZS5mb29kc2FmZXR5Lm1zdS5lZHWCG29yaWdpbi1kZXYtZ2Ntcy5hYnNv
bHV0LmNvbYIZb3VyMi50ZXN0LmNtczEuYXNhLnV3LmVkdYIVcGFydG5lcnMuc3Rh
cmxlYWYuY29tghZwYXJ0dGltZS5jYXJleS5qaHUuZWR1ghtwYXR0YXlhLmRldi5j
bXMxLmFzYS51dy5lZHWCI3BlcnNvbmFsZmluYW5jZS5tdWx0aWRldmNvbS51YWYu
ZWR1ghdwaGFybWFjeS5zcy5wYWNpZmljLmVkdYIdcGlhbm9saXZlLmFtZXJpY2Ft
YWdhemluZS5vcmeCGnBvcGhlYWx0aC51YWhzLmFyaXpvbmEuZWR1ghhwb3N0LXdw
LnJlbGlnaW9ubmV3cy5jb22CHnBvd2VydGVzdC5jdGQubm9ydGh3ZXN0ZXJuLmVk
dYIUcHBkLXN0YWdpbmcuc2ZzdS5lZHWCGXBwci5lcmRmLmFwcGNlbGVyYXRvci5j
b22CEXByYWdtYXRpYy51ZmMuY29tghdwcmV2aWV3LmRmYS5jb3JuZWxsLmVkdYIR
cHJvZC13d3cuY2hvcC5lZHWCFXByb2dyYW1zLmFsdmVybmlhLmVkdYIWcHJvZ3Jh
bXMuY2FyZXkuamh1LmVkdYIacHMtcGFudGhlb24udW1kZWFyYm9ybi5lZHWCE3Bz
cC5zYW5kaWVnb3pvby5vcmeCFXB1YnNydi5lZm9ybXMuYXN1LmVkdYIhcWEuY2Fs
aWZvcm5pYXNjaWVuY2VjZW50ZXIuY2EuZ292gh1xdWVyeWJ1aWxkZXIuYXBwY2Vs
ZXJhdG9yLmNvbYIecmFjaXNtaGFybXNoZWFsdGguYmVya2VsZXkuZWR1ghZyYWRp
b2xvZ3kudmlyZ2luaWEuZWR1ghRyYWRzYWZlLmJlcmtlbGV5LmVkdYIScmMubGli
cmFyeS5vc3UuZWR1ghlyZWNvdmVyeS1nc2UuYmVya2VsZXkuZWR1gh5yZWRlc2ln
bmhlYWx0aGNhcmUubWNsYXJlbi5vcmeCHHJlZGlyZWN0cy5wb2xpY3kuY29ybmVs
bC5lZHWCJXJlZ2VuZXJhdGl2ZW1lZGljaW5lLnVhaHMuYXJpem9uYS5lZHWCFXJl
bGlnaW9uLmJlcmtlbGV5LmVkdYIgcmVxdWVzdGdlbS5idXNpbmVzcy51Y2RlbnZl
ci5lZHWCDHJlc3gudXNjLmVkdYIScmV3ZWIuYXJjaGJhbHQub3JnghNyZ2QyMDIw
LnJ1dGdlcnMuZWR1ghhyaGV1bWF0b2xvZ3kudXRvcm9udG8uY2GCD3JtcC5ydXRn
ZXJzLmVkdYIdcm50b2Jzbm9ubGluZXByb2dyYW1zLmFkdS5lZHWCEXJwZ3AuYmVy
a2VsZXkuZWR1giFyc3RpbnN0cnVtZW50cy5yc3RpbnN0cnVtZW50cy5jb22CJXJz
dGluc3RydW1lbnRzaW5mby5yc3RpbnN0cnVtZW50cy5jb22CF3J1Ynktc3RhZ2lu
Zy52aWxjZWsub3Jngg5zYm9iZXQudWZjLmNvbYIQc2JvYmV0ODgudWZjLmNvbYIV
c2NpbHNyZXN4LnJ1dGdlcnMuZWR1ghZzZGdzLXN0YWdpbmcuc2NvdXQub3Jngg1z
ZWN1cmUudHUub3JnghtzZXJ2aWNlbGVhcm5pbmcuY3N1c3Rhbi5lZHWCHnNleGdl
bmRlcmxhYi5odW1hbi5jb3JuZWxsLmVkdYIac2xvdC5wYm4tYTU2LnJvY2todXJz
dC5lZHWCDHNsb3QudWZjLmNvbYIUc2xvdDg4LXJlc21pLnVmYy5jb22CEXNsb3Q4
OC52aXZvdGUuZ292gh5zbG90Z2Fjb3IuY3RkLm5vcnRod2VzdGVybi5lZHWCFnNs
b3RvbmxpbmUudG9kYi5jYS5nb3aCHHNtYWdlbnQuY3RkLm5vcnRod2VzdGVybi5l
ZHWCK3NtYXJ0ZGlnaXRhbHBob3RvZ3JhcGh5Lm11bHRpZGV2Y29tLnVhZi5lZHWC
GXNtdHAuY29tbW9uc2Vuc2VtZWRpYS5vcmeCE3NvY2lhbC5kYXZpZHNvbi5lZHWC
E3NvcmUuYWN0b3JzZnVuZC5vcmeCGXNvdXJjZXUud2FybmVycGFjaWZpYy5lZHWC
GXNzYS5ibG9ncy5nb3ZkZWxpdmVyeS5jb22CHXN0YWdlLm9ubGluZWVkdWNhdGlv
bi5wc3UuZWR1ghVzdGFnaW5nLW5hLmFsdHJhbi5jb22CGHN0YWdpbmcuZnJlZWRv
bXdvcmtzLm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisG
AQQB1nkCBAIEgfQEgfEA7wB2ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl
7bSZAAABhbVJLmAAAAQDAEcwRQIhAKYFpOKuxbskWm7mtNhdtFgK9kl+CV7EVdfo
q2TfYTQUAiBeeKmUwMBbhymlvCVZ2rqoZ7ujEsCYz2PPqLjEu4Ea4AB1AK33vvp8
/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABhbVJLpEAAAQDAEYwRAIgYMJb
ZbSeHwpa5hMZLRAfHT0qgFUlxNakffhBA8+TdoQCIFMnFidRbJ/ZZPgNB0+YUm8G
HWKnjOkbfqA7q41OK7eRMA0GCSqGSIb3DQEBCwUAA4IBAQCR/Ub/XWRJZP6uDXds
mFKMAyD5fEf1LnuFQGLObMzZK9PNaCl6UHuIRcs5wH41YCqHz3pbAj4bXPDSRwXx
dLKIo2yiLAJipCLnxe0JIS28UpeoFhFKiUSO5zEdZnQaSuevzb7rENqvgSO2+JTi
E09bY/S7kKGMjWsJl2NM02TMCHnRC5zMJmpQm5JCVI9m17my5IqwHOsVdvaABzJM
11fQNDJ0Ep8p8r4vaEckezdt+qPMdQClPwTkHw+KDiwhzBjEn9YptEEoWZQXCryZ
1ho5Qypk0/GMo3vGOqHW8/cVQVj+97lAJvuvhtYbRg4ILskFKlHew/zrDsKtrza2
Yc/d
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw46iRMF7hwNtVI+uKl5U
F0CD5U3UkQMeBF8svfU9dGopQU40Ing2QVq1B+BFMG1Mn7ICzhEdYaQd/8z2o4yC
SvEOruHHbvRx9j8NrkB2VDdThoomFKEa0Ycr+N7Jt9BiGuqfFFcgkf3J61GgtdOf
eb3u1E1vLfFD14HJmJGlDtvFwp7KtZmSuKnUDvttZApeghzlw1S+QrS7sZo5epN5
As25V4MVnW5dTJFTfmhnbB9vkhJDh+O6DeLYszX0dSxVrsGI66gIDvk8vwZ1a2is
lILGQ2WDC/2oWV2R+PvWHZuUKqzLGtROWGuvZLR0QziNDryF+cVGICsOtMyOuvv4
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 417109046239725163105436562147868737410571
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-15 10:55:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-15 10:55:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'm.ajc.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24686804846986700463286235473113579310640311389133520587690101062602581528438869452339616892952701902849061179936484875175962958584343852540185544183047237885328788321992471394861784671407872629842251491403749912828485536459849583589245555154424957554500881276697578384568150008763221433348736210875490343848174039032910683409070497266386346837523561884554602537558352214849828580677730541219147370984863199779155273255284942666036956568962165193514919553059246300356407560953783348314569168119667241859434381348711752591025577632034019588909291610597210916265772008296336673389410930207470033159467095714263857887333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04446ac8a319d5b14a737c587fb7f56c3901b262
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2497 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ajc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.qsrmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.voiceofsandiego.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.merrimack.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailams.ustelecom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.magicsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingprojects.maryville.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaroom.livestrong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memberauth.audiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsites.globalwaters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.ajc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilize.medika.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msa2016.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtageniustransitchallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multidev1.gc.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nacopn3.naco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartechedge.nar.realtor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.catholicschoolsbq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsite.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsite.dev.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.warnerpacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noticias.lared.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrrss.ced.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'null.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyild.unionderm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odl.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oksy.fronterasdesk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.gistnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldsite.itu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'om.sterling.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.foodsafety.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-dev-gcms.absolut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'our2.test.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.starleaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parttime.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pattaya.dev.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalfinance.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacy.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianolive.americamagazine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pophealth.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'post-wp.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powertest.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppd-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppr.erdf.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pragmatic.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.dfa.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-www.chop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programs.alvernia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programs.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-pantheon.umdearborn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psp.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubsrv.eforms.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.californiasciencecenter.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'querybuilder.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racismharmshealth.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiology.virginia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsafe.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.library.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recovery-gse.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redesignhealthcare.mclaren.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirects.policy.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regenerativemedicine.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religion.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'requestgem.business.ucdenver.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reweb.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgd2020.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmp.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rntobsnonlineprograms.adu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpgp.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstruments.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstrumentsinfo.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruby-staging.vilcek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbobet.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbobet88.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scilsresx.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdgs-staging.scout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicelearning.csustan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexgenderlab.human.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot.pbn-a56.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot88-resmi.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot88.vivote.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slotgacor.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slotonline.todb.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smagent.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartdigitalphotography.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.commonsensemedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.davidson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sore.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourceu.warnerpacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssa.blogs.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-na.altran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.freedomworks.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000185b5492e600000040300473045022100a605a4e2aec5bb245a6ee6b4d85db4580af6497e095ec455d7e8ab64df61341402205e78a994c0c05b8729a5bc2559dabaa867bba312c098cf63cfa8b8c4bb811ae0007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000185b5492e910000040300463044022060c25b65b49e1f0a5ae613192d101f1d3d2a805525c4d6a47df84103cf937684022053271627516c9fd964f80d074f98526f061d62a78ce91b7ea03bab8d4e2bb791
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0091fd46ff5d644964feae0d776c98528c0320f97c47f52e7b854062ce6cccd92bd3cd68297a507b8845cb39c07e35602a87cf7a5b023e1b5cf0d24705f174b288a36ca22c0262a422e7c5ed09212dbc5297a816114a89448ee7311d66741a4ae7afcdbeeb10daaf8123b6f894e2134f5b63f4bb90a18c8d6b0997634cd364cc0879d10b9ccc266a509b9242548f66d7b9b2e48ab01ceb1576f68007324cd757d0343274129f29f2be2f6847247b376dfaa3cc7500a53f04e41f0f8a0e2c21cc18c49fd629b441285994170abc99d61a39432a64d3f18ca37bc63aa1d6f3f7154158fef7b94026fbaf86d61b460e082ec9052a51dec3fceb0ec2adaf36b661cfdd