5662800294707200-fe2.pantheonsite.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:67:88:db:53:fe:2c:44:35:fc:b4:f8:eb:2a:4f:28:dd:1f was issued on by Let's Encrypt.

With 55 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=5662800294707200-fe2.pantheonsite.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:67:88:db:53:fe:2c:44:35:fc:b4:f8:eb:2a:4f:28:dd:1f
Serial Number (int): 296567855412153819546611552456108132588831
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:94:73:60:6e:38:83:d3:b7:ab:c0:e8:ee:20:18:12:3c:90:82:1e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 43:97:3c:e4:ff:08:9d:05:b1:ec:d5:29:8a:89:33:db:3c:27:35:e7
Fingerprint (sha256): 38:d0:8d:b6:b0:90:63:08:ef:ef:ed:f7:87:f8:f9:f1:7d:3d:e1:45:6c:c1:62:a7:91:3f:60:f7:67:8a:1d:69

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 5662800294707200-fe2.pantheonsite.io

55

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 5662800294707200-fe2.pantheonsite.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

5662800294707200-fe2.pantheonsite.io
api.platform.manulife.io
congregationshalom.org
darlingingredientsms.com
daxuexinfa.yale.edu
dev.bigswitchnetworks.de
dev.daxuexinfa.yale.edu
dev.reproeco.yale.edu
dev.taylor-research.yale.edu
dev.wcac.yale.edu
dev.yae.yale.edu
dev.yibs.yale.edu
fundxfund.com
fundxfunds.com
henkeinc.com
hugostyle.com
kareemskitchen.com
lavelleconstruction.com
maclinsecuritydoor.com
northarrowpartners.com
rakichlab.yale.edu
scazlab.yale.edu
songlab.yale.edu
strobel.yale.edu
teamprofound.com
test.bigswitchnetworks.de
tst.daxuexinfa.yale.edu
tst.staverlab.yale.edu
tst.stearnslab.yale.edu
tst.strobel.yale.edu
tst.ygsna.sites.yale.edu
tst.yibs.yale.edu
tst.yins.yale.edu
tst.ynhrs.yale.edu
tst.yura.yale.edu
unionsummer.com
worldvision.net
www.congregationshalom.org
www.darlingingredientsms.com
www.downtownraleigh.com
www.fundxfunds.com
www.globalsistersreport.org
www.gotcha-graphics.com
www.henkeinc.com
www.hugostyle.com
www.joshmandelbaum.com
www.kareemskitchen.com
www.laing.co
www.lavelleconstruction.com
www.maclinsecuritydoor.com
www.northarrowpartners.com
www.shamrockoverhead.com
www.teamprofound.com
www.texaswatch.org
www.worldvision.net

Other certificates including the domain name 5662800294707200-fe2.pantheonsite.io

(limited to 100 certificates)
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io
5662800294707200-fe2.pantheonsite.io

Certificate

The complete raw certificate details for 5662800294707200-fe2.pantheonsite.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA272cFNQ+5Sp7MSuDY2Th
XsDIwYqsVxNCkpa1vPkwsqD21+Se4M2PM8te7pxlH1OWJKWa0El1ydLCxK8ZL8mc
bU0ZCS4C8ec5bVISYi/u3S5gXL05YAdVE0Pk3GFOJrXPOXdY3tzVhbibSmnLzJ5W
/yVNw5s0tiMQlPpsoLYS5EBszhucTX9i6Z0oBtjsO6Ak9wPhvTJj7Y8pQQn5dRl/
QhKmnotF8ZqffLbMy2/acwCAbI51ewOofR12LkUtsF8zqjixoA3X0zf4icFPBAHp
18Awk/YnHkC4t25sYWziyiq+3cvn9mjjntlCGWbBVq+APee1wxK9voDQNgrLD0Bi
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296567855412153819546611552456108132588831
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-08 00:29:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-06 00:29:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5662800294707200-fe2.pantheonsite.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27739688811893269036016379549165623345384304716432411784997726975904282396557244944884554656982237379757036775920578306420085292108863135456109976823504130306720002816762831772985480182447521425227414873317791342408889987413507450866258682576701709901276326557907494122196374920604025297368966273818165110063927789268983673991101120403710344727157320012776364954666128345090272886739830409733410913763927476572096673582698594697013000416549853567966196866156432234911170324142723152007865427093478266443505797244356280911038797441899530382336871679066660676959221264644310183132745013566615018569898569021232869565141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							219473606e3883d3b7abc0e8ee2018123c90821e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1234 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5662800294707200-fe2.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.platform.manulife.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'congregationshalom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darlingingredientsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daxuexinfa.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bigswitchnetworks.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.daxuexinfa.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.reproeco.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.taylor-research.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wcac.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.yae.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.yibs.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundxfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundxfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henkeinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugostyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kareemskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavelleconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maclinsecuritydoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northarrowpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rakichlab.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scazlab.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'songlab.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strobel.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamprofound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.bigswitchnetworks.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.daxuexinfa.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.staverlab.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.stearnslab.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.strobel.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.ygsna.sites.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.yibs.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.yins.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.ynhrs.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.yura.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unionsummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldvision.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.congregationshalom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darlingingredientsms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.downtownraleigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fundxfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalsistersreport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gotcha-graphics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.henkeinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hugostyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joshmandelbaum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kareemskitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laing.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lavelleconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maclinsecuritydoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northarrowpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shamrockoverhead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teamprofound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texaswatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldvision.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016517276a060000040300473045022053f0e464285a674122f1f79ece541fc3951a658cd154debfde1809ff6c772016022100f45cf55c441796acc91b4ffc4f9701b1256ce799e4fce88b3348af29dc0956c9007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016517276bc3000004030046304402201c83461621f524b7b6fe409b367490baccf62cdf940642720eda61da87854681022044079e5052f56a669aa93973d6479f3af446dfde45a52206b9c7488036e1764c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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