industri40.ida.dk

Issued by R3

About this certificate

This digital certificate with serial number 04:b0:bb:6f:2c:25:c1:18:42:b2:3c:07:00:0d:68:59:fe:4c was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=industri40.ida.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b0:bb:6f:2c:25:c1:18:42:b2:3c:07:00:0d:68:59:fe:4c
Serial Number (int): 408587983180706457299929810958032662298188
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f6:35:79:7c:72:db:f6:cd:b8:c2:03:dc:d6:9a:35:63:9d:f8:d1:89
Fingerprint (sha256): 39:87:0f:43:16:25:8e:09:52:d1:6f:b4:3f:e2:1d:a2:6d:61:cd:db:2a:9b:94:fe:6c:02:d5:a3:2f:15:17:46

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate industri40.ida.dk

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for industri40.ida.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

industri40.ida.dk
info-dev.calperformances.org
inside.gc.cuny.edu
it-chat.web.arizona.edu
it.uahs.arizona.edu
itcatalyst.sfsu.edu
jwplayer.essence.com
labellelab.asu.edu
lambda.usc.edu
landing.pacific.edu
liberalarts.ss.pacific.edu
live-ipmb.pantheonsite.io
live-legacy-cms.pantheonsite.io
live.aep.cornell.edu
live.bme.cornell.edu
live.cam.cornell.edu
live.engineering.cornell.edu
live.ophd.pantheon.berkeley.edu
live.ucdavis.edu
makinghistory.gwu.edu
management.arizona.edu
mediasandbox.cas.msu.edu
mt.nokidhungry.org
mtageniustransitchallenge.ny.gov
multidevcom.uaf.edu
nanophotonics.asu.edu
nartc.fcm.arizona.edu
new.yearup.org
nistmep.blogs.govdelivery.com
nxterra.ucop.edu
odl.rutgers.edu
oist.ucsb.edu
online.asu.edu
online.foodsafety.msu.edu
opendata.wa.gov
ordbc.arizona.edu
peaceways.yale.edu
pentest.web.arizona.edu
pharmacy.ss.pacific.edu
phd.antioch.edu
pop.tularesuperiorcourt.ca.gov
preview.brand.cals.cornell.edu
projectshare.sfsu.edu
psp.sandiegozoo.org
querybuilder.appcelerator.com
radsafe.berkeley.edu
resx.usc.edu
rmp.rutgers.edu
rpgp.berkeley.edu
rstinstrumentsinfo.rstinstruments.com
sac.arizona.edu
scilsresx.rutgers.edu
sexgenderlab.human.cornell.edu
sites.laverne.edu
smtp.tularesuperiorcourt.ca.gov
stage.courts.ca.gov
stage.nebrwesleyan.edu
stage.onlineeducation.psu.edu
stanfordsummersession.stanford.edu
stfincrease.unlv.edu
stopbreathethink.org
support.doctorswithoutborders.org
swau-undergrad.cleancatalog.net
swfwmd.state.fl.us
tango.franklin.uga.edu
test-web-lws.edu.help
test-wp.nationalreview.com
test.aep.cornell.edu
test.cam.cornell.edu
test.cee.cornell.edu
test.finance.upenn.edu
test.mae.cornell.edu
test.mse.cornell.edu
test.radcliffe.edu
test.thedoorway.nh.gov
testb.test.uis.georgetown.edu
thepointalehouse.com
tl.wvu.edu
townofdiscoverybay.ca.gov
transportplan.rutgers.edu
tst.dhsri.yale.edu
tst.ergo.yale.edu
tst.laffertylab.yale.edu
tst.odonnelllab.research.yale.edu
updates.cjei.cornell.edu
updates.cpra.cornell.edu
upenn-it.asc.upenn.edu
virtual2.unlv.edu
vpr.arizona.edu
webdev.colorado.edu
websiteservices.watech.wa.gov

Other certificates including the domain name ida.dk

(limited to 100 certificates)
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
5648161435549696-fe2.pantheonsite.io
5691420614590464-fe3.pantheonsite.io
phd-day.ida.dk
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
techfestival1.ida.dk
dns-vetting1d.map.fastly.net
5691420614590464-fe3.pantheonsite.io
5645240186699776-fe4.pantheonsite.io
twentythree.net
5731563417370624-fe3.pantheonsite.io
dns-vetting1d.map.fastly.net
twentythree.net
dev.wellness.yale.edu
twentythree.net
itstuderende.ida.dk
chns168.courseresource.yale.edu
dns-vetting1d.map.fastly.net
5731563417370624-fe3.pantheonsite.io
twentythree.net
dns-vetting1d.map.fastly.net
dev.embody.yale.edu
expeditions.sandiegozoo.org
club.kjzz.org
dns-vetting1d.map.fastly.net
twentythree.net
dev.wellness.yale.edu
5645240186699776-fe4.pantheonsite.io
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
5691420614590464-fe3.pantheonsite.io
ida.dk
5691420614590464-fe3.pantheonsite.io
dns-vetting1d.map.fastly.net
5761673931522048-fe1.pantheonsite.io
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
link.ida.dk
twentythree.net
twentythree.net
ida.dk
5731563417370624-fe3.pantheonsite.io
techfestival.ida.dk
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
5648161435549696-fe2.pantheonsite.io
5731563417370624-fe3.pantheonsite.io
twentythree.net
connect.iadb.org
link.ida.dk
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
*.ida.dk
*.udv.ida.dk
5731563417370624-fe3.pantheonsite.io
5761673931522048-fe1.pantheonsite.io
5645240186699776-fe4.pantheonsite.io
fordele.ida.dk
twentythree.net
outplacement.ida.dk
acadmintest.cuofco.org
twentythree.net
fordele.ida.dk
5645240186699776-fe4.pantheonsite.io
5691420614590464-fe3.pantheonsite.io
nielsbohrstaging.ida.dk
dns-vetting1d.map.fastly.net
medlem.ida.dk
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1.map.fastly.net
5731563417370624-fe3.pantheonsite.io
5761673931522048-fe1.pantheonsite.io
5761673931522048-fe1.pantheonsite.io
5691420614590464-fe3.pantheonsite.io
dns-vetting1d.map.fastly.net
5648161435549696-fe2.pantheonsite.io
twentythree.net
dns-vetting1d.map.fastly.net
5691420614590464-fe3.pantheonsite.io
twentythree.net
twentythree.net
5761673931522048-fe1.pantheonsite.io
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net

Certificate

The complete raw certificate details for industri40.ida.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408587983180706457299929810958032662298188
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-22 10:40:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-20 10:40:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'industri40.ida.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industri40.ida.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info-dev.calperformances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.gc.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-chat.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcatalyst.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwplayer.essence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labellelab.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambda.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberalarts.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-ipmb.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-legacy-cms.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.bme.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.engineering.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'management.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediasandbox.cas.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mt.nokidhungry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtageniustransitchallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanophotonics.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.yearup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nistmep.blogs.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nxterra.ucop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odl.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oist.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.foodsafety.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendata.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordbc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peaceways.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pentest.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacy.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phd.antioch.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.tularesuperiorcourt.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.brand.cals.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectshare.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psp.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'querybuilder.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsafe.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmp.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpgp.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstrumentsinfo.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scilsresx.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexgenderlab.human.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.laverne.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.tularesuperiorcourt.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.courts.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanfordsummersession.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfincrease.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stopbreathethink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swau-undergrad.cleancatalog.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swfwmd.state.fl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tango.franklin.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-web-lws.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-wp.nationalreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cee.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.finance.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.radcliffe.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.thedoorway.nh.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testb.test.uis.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepointalehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tl.wvu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townofdiscoverybay.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transportplan.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.dhsri.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.ergo.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.laffertylab.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.odonnelllab.research.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.cjei.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.cpra.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upenn-it.asc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtual2.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpr.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdev.colorado.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websiteservices.watech.wa.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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