ucdavis.boulderinsight.com

Issued by R3

About this certificate

This digital certificate with serial number 03:e7:94:ba:c0:da:fe:08:10:d8:51:f8:ba:23:47:8f:9a:f9 was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ucdavis.boulderinsight.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e7:94:ba:c0:da:fe:08:10:d8:51:f8:ba:23:47:8f:9a:f9
Serial Number (int): 340139779976182382299719695620737059494649
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 50:e3:e4:b3:f0:67:60:54:b6:df:fa:12:fb:7f:05:4c:13:27:17:35
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e6:6c:54:af:ac:55:2e:11:36:a5:e2:19:cb:14:a8:2c:81:d3:f2:a3
Fingerprint (sha256): 37:e1:05:16:e6:d6:59:80:25:15:fe:eb:63:73:7d:08:8c:50:50:b5:d5:ca:60:d1:93:29:77:4a:32:f7:ef:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ucdavis.boulderinsight.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ucdavis.boulderinsight.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

academy.ovaledge.com
app.drbizboom.com
aspectpolo.polo-development.com
beaufort.polo-development.com
binfieldheathpoloclub.polo-development.com
blackbears.polo-development.com
brandywinepolo.polo-development.com
cirencester.polo-development.com
connectstage.wintellplus.com
demo.jillianstreit.com
demo.malcomonline.com
drafting.trubytraining.com
dubaipoloclub.polo-development.com
dukane.foremostmedia.com
emsworth.polo-development.com
ghantootpolo.polo-development.com
grandcounty.academyfortourism.com
hampoloclub.polo-development.com
hertfordshire.polo-development.com
houseboats.trubytraining.com
india.polo-development.com
ipapolo.polo-development.com
jazzpharma.malcomonline.com
jri.employindy.org
laesperanza.polo-development.com
learn.onboardmaritime.com
learn.tfgeducation.com
learning.servicecore.com
learning.yourdocket.com
lms.alpha-derm.com
login.fightconnectapp.com
map.employindy.org
master.malcomonline.com
mountshastasupermarket.trubytraining.com
msolearning.tomtom.com
mysports.polo-development.com
novartis.malcomonline.com
pdh.suiteintro.com
pinnacle.tonyrobbins.com
puestoviejo.polo-development.com
silverthorn.trubytraining.com
summerhill.polo-development.com
tennesseelms.stchealth.us
ucdavis.boulderinsight.com
university.foremostmedia.com
visitphilly.academyfortourism.com
www.americanvaluescenter.org
www.ipapolo.com
www.knowledge.homes
www.malcomonline.com

Other certificates including the domain name boulderinsight.com

(limited to 100 certificates)
wadetrim.trubytraining.com
bhsa.mysportsanalysis.com
realtyinsights.com
cpcontacts.adventuredeb.com
wadetrim.trubytraining.com
farmviability.oahurcd.org
xltcg.com
xltcg.com
academy.boulderinsight.com
internal.hedgucation.assurehedge.com
www.educate.ekgguy.com
educate.ekgguy.com
adventuredeb.com
learning.servicon.com
www.learn-experiencemanitouregion.ca
nopingpong.com
boulderinsight.com
serpentine.polo-development.com
polopark.polo-development.com
learning.servicon.com
plataforma.pedago.cl
cpcontacts.adventuredeb.com
staff.arcsystechnologies.com
uni.bradfordconsolidation.com
learning.servicon.com
www.bloombehive.com
cpanel.realtyinsights.com
learning.servicon.com
farmviability.oahurcd.org
farmviability.oahurcd.org
learning.servicon.com
www.realtyinsights.boulderinsight.com
farmviability.oahurcd.org
autodiscover.deltasigmaphi.com
www.garrisoncox.boulderinsight.com
learning.servicon.com
polobern.polo-development.com
www.tridotacademy.com
autodiscover.boulderinsight.com
book.dragonnapper.com
competence.rosen-group.com
uni.airportlogistics.org
book.dragonnapper.com
elearning.toyota.com.ph
realtyinsights.com
deltasigmaphi.boulderinsight.com
academy.boulderinsight.com
educate.ekgguy.com
learning.travelalberta.com
farmviability.oahurcd.org
alp.arcsystechnologies.com
webdisk.winnerwinnerchickendinner.com
autodiscover.gstiegler.com
xltcg.com
internal.hedgucation.assurehedge.com
ucdavis.boulderinsight.com
www.educate.ekgguy.com
www.learn-experiencemanitouregion.ca
www.bloombehive.com
charlottebestbuys.com
www.pts.org
bourbon.guru
litifam-training.litify.com
educate.ekgguy.com
antisharkcage.com
www.educate.ekgguy.com
garrisoncox.com
learning.servicon.com
academy.evgo.com
cpanel.realtyinsights.com
adventuredeb.com
xltcg.com
educate.ekgguy.com
xltcg.com
elearning.toyota.com.ph
farmviability.oahurcd.org
university.tektonresearch.com
brand.polo-development.com
educate.ekgguy.com
learning.servicon.com
fairchild.trubytraining.com
www.wearespinco.ca
educate.ekgguy.com
farmviability.oahurcd.org
realtyinsights.com
internal.hedgucation.assurehedge.com
elearning.toyota.com.ph
educate.ekgguy.com
adventuredeb.com
www.realtyinsights.boulderinsight.com
hpaumpire.mysportsanalysis.com
deltasigmaphi.com
edu.4redi.net
www.tridotacademy.com
adventuredeb.com
farmviability.oahurcd.org
gstiegler.com
wadetrim.trubytraining.com
bourbon.guru
internal.hedgucation.assurehedge.com

Certificate

The complete raw certificate details for ucdavis.boulderinsight.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPrMDD1EHFsVrlm8X8wl
eVEkJaO/rquVBDS256NQ6UW2VoEdMiIIzWwzRa8oZXHRv/e4dghHyOmN/HvKs0Zu
BKPGVaNSFPfBbKYOTfWjNay4Ao+GCVEirc2/J6HU6HS0x/DH3uT8aAe06xVnGh49
dHNE8/zQEtz1BffIndZwb+UzJKcLP6ULIWz7BtwOUkd/68nhHsz1hunmKAfJUf85
2pETEbUUhnvk7vGpLfIX5SgYwlSjotGSwDqcj9zAuoEy+rFxB3nKc5N1NaQ8BqJ0
nBTrbWCTjhpontqNtZCOovvjtSqquOPbK+mHEe6CXupRSK60dv1nD7ESgbQwIRkj
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340139779976182382299719695620737059494649
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 01:05:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 01:05:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ucdavis.boulderinsight.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25371333633706639136791207308613748197052050555911891649574571470951588412094715397482309218292791957364881258689616644812904103748605398305604008677588596428680744880616133814686507548097532650180151353778074361209906646863397752077571556303974663627000052018162454069000350356293982217378109804711885720484065438859743530788820937696044418007366694903800198153143280649293169353239899278292940075270615146837357738568535284127061727814265150061067735130691475683802193060135323152189393511847404704289458825585332230797048322911616839279246089077225486714912167068394771477844104945468085105904550538577239327974151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50e3e4b3f0676054b6dffa12fb7f054c13271735
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1438 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.ovaledge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.drbizboom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspectpolo.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beaufort.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binfieldheathpoloclub.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackbears.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandywinepolo.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cirencester.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectstage.wintellplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.jillianstreit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.malcomonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drafting.trubytraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubaipoloclub.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dukane.foremostmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emsworth.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghantootpolo.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandcounty.academyfortourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hampoloclub.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hertfordshire.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseboats.trubytraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'india.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipapolo.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jazzpharma.malcomonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jri.employindy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laesperanza.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.onboardmaritime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.tfgeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.servicecore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.yourdocket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.alpha-derm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.fightconnectapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'map.employindy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master.malcomonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountshastasupermarket.trubytraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msolearning.tomtom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysports.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novartis.malcomonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdh.suiteintro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinnacle.tonyrobbins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puestoviejo.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverthorn.trubytraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summerhill.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennesseelms.stchealth.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucdavis.boulderinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'university.foremostmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitphilly.academyfortourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americanvaluescenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipapolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knowledge.homes'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malcomonline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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