5680423082393600-fe4.pantheonsite.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:2e:d4:70:f7:a3:84:df:a6:8d:ad:99:ae:98:bc:e2:fa:aa was issued on by Let's Encrypt.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=5680423082393600-fe4.pantheonsite.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2e:d4:70:f7:a3:84:df:a6:8d:ad:99:ae:98:bc:e2:fa:aa
Serial Number (int): 364384515500469198961629042110621831854762
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 57:02:fd:bf:2c:4d:ef:83:1b:a9:79:63:4d:e6:41:5a:40:15:b8:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 39:89:10:86:7a:9a:f7:3a:74:f9:52:38:85:55:ea:da:6b:0a:14:99
Fingerprint (sha256): 39:73:9f:54:3d:36:6d:3a:ac:a2:e0:fc:4a:9f:40:f0:55:56:ad:9d:76:ac:88:e5:47:c2:ca:6e:f2:33:98:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 5680423082393600-fe4.pantheonsite.io

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 5680423082393600-fe4.pantheonsite.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

5680423082393600-fe4.pantheonsite.io
aap.georgetown.edu
aggiehero.ucdavis.edu
altawaverly.com
amerivents.com
api.pintexsolutions.com
app.pintexsolutions.com
asev.org
benefits.georgetown.edu
bioinformatics.georgetown.edu
blogs.ucdavis.edu
brownstoneproperties.com
commencement.georgetown.edu
cricketwirelessperks.com
curiosity.ucdavis.edu
customerexperiencenetwork.org
financialaffairs.georgetown.edu
french.georgetown.edu
friendscentercorp.org
geriatrics.georgetown.edu
ghstar.org
globalhealthms.georgetown.edu
go.ucdavis.edu
governance.georgetown.edu
gradcareer.georgetown.edu
green-promise.org
grvp.georgetown.edu
history.georgetown.edu
hoyakids.georgetown.edu
icp.georgetown.edu
ideaa.georgetown.edu
imaginationtakesshape.com
innocentbystander.com.au
internalaudit.georgetown.edu
italianinstitute.college.georgetown.edu
journalism.georgetown.edu
kidsandenvironment.georgetown.edu
mailservices.georgetown.edu
medievalstudies.georgetown.edu
memory.georgetown.edu
my.pintexsolutions.com
ofrboise.com
pilothilladvisors.com
rightsforall.org
rswreverseengineeringandmachining.com
spanport.georgetown.edu
sthope.org
tag.bio
test.feedingamerica.org
thetractiongroup.com
unfold.ucdavis.edu
unfoldpodcast.ucdavis.edu
vintagehousing.com
www.airportscouncil.org
www.altawaverly.com
www.amerivents.com
www.asev.org
www.brownstoneproperties.com
www.cricketwirelessperks.com
www.customerexperiencenetwork.net
www.customerexperiencenetwork.org
www.friendscentercorp.org
www.ghstar.org
www.green-promise.org
www.imaginationtakesshape.com
www.innocentbystander.com.au
www.ofrboise.com
www.openhandatlanta.org
www.pilothilladvisors.com
www.rightsforall.org
www.rswreverseengineeringandmachining.com
www.sthope.org
www.thetractiongroup.com
www.vintagehousing.com

Other certificates including the domain name 5680423082393600-fe4.pantheonsite.io

(limited to 100 certificates)
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io

Certificate

The complete raw certificate details for 5680423082393600-fe4.pantheonsite.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDGqfkcR58JDGUjjfF3o
uxTziAMuq73LJEJFQBLWMVVtxSqLCODDAc/vIqnaMn5VGUnNd6APz0FhZCv9MtgR
LMZ7YUwW42pNdR7xFK6F+SBOZBG4Jr90mdEdcJSnOW0RYtsAx6iN+lXCmvbFGlGT
GPbE1tunyUlICUEeRjoAvqXHgCVGzdG/qTFGSrEdh/7Vpb6qvY2sqcYa9jkYMgel
1pp3hjdygoLy7250U484PWbQ5rQsPvpFQ/Upamj/27TRqFCgJ0Tr9SW/d9Qr7IEw
IXRIcI8d8iiA7qgysgL8w2b1q+RlsviVMHwb/ap46npsHt6hDUB95V2/r+9y0O1/
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364384515500469198961629042110621831854762
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-06 13:21:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-04 13:21:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5680423082393600-fe4.pantheonsite.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18707760347121943150116249891125201859036403023008143853550793296842643752153993493542468762401245989491399482566496677845018962204140898826898583855693902268833321183836113618241714063273293436817034578178841687839353261583958224047309187693662900062540995471919037671490156420065680307641440169474567973187823484285671210902184129097003031949937311897265063911856696198898692612388697304111124020667213646780422057204419974547022685772480755093417658014126728354795298676042279948453478354613858895933936212746952114998739543099196481808951268079465991203011247610995443739493378120184121493825296758081897425108769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5702fdbf2c4def831ba979634de6415a4015b838
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1824 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5680423082393600-fe4.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aap.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggiehero.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altawaverly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amerivents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.pintexsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.pintexsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioinformatics.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brownstoneproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commencement.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketwirelessperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curiosity.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customerexperiencenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialaffairs.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'french.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendscentercorp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geriatrics.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghstar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalhealthms.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'governance.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gradcareer.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'green-promise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grvp.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'history.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoyakids.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icp.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideaa.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imaginationtakesshape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innocentbystander.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internalaudit.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'italianinstitute.college.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journalism.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidsandenvironment.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailservices.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medievalstudies.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memory.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.pintexsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofrboise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilothilladvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightsforall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rswreverseengineeringandmachining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spanport.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tag.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.feedingamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetractiongroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unfold.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unfoldpodcast.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintagehousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airportscouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altawaverly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amerivents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brownstoneproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cricketwirelessperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.customerexperiencenetwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.customerexperiencenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendscentercorp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghstar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.green-promise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imaginationtakesshape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innocentbystander.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ofrboise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openhandatlanta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pilothilladvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rightsforall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rswreverseengineeringandmachining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sthope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetractiongroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vintagehousing.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c674e1c8a000004030046304402204e657b1f8ce431fa0320d2c0fb718a6c6292097c5710f2b08520619219ca4bf802206f9400b8cba7ec185223c96b744f60f4ad12f93d737999a3f6c3b43fa43a1680007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c674e1c8b0000040300483046022100cf5e61163c7e9147091eed3d30c9ac639d9a9f4741471a8ab6441a366dac708e022100ae18dedb74afdce5f9f5e38c64c273b48cb04c6c536af6f140bd79ba9242ec34
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001b09ca5e7e2fee6a1033bbdab14e7953bec177d6f9fbd0f278d8a6e2152ffd9e168b4f04d76c9d8643ca11c95f5ee5da184b675c87dbe70f8c73417ecc66a9747d8922abd017fa14fcd723f6f5c84a948fe9a7a04d6ed3db5b6c737490eb62d1e312e2bc74d65e707929b4b27b09937352dbb8af9d756c2ae7c6298a7fe3a0359802c9cda4fe615ab4c00a8c0a4b00e7022f3e05e31f50c5d7628a2ff688e5778c50e74084846ea74f3aabb765eb1ed308880710326fd992f478303aede94c862b62db3344c4b02721493833dd7136bbd7239e968f1c3547d715e927379cf7d0a5cb83491053cb8804c46ded1c5f30640438cd961fdab06680f998433dc475dc