5696605713858560-fe4.pantheonsite.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:be:b3:43:87:45:99:8a:7e:05:39:2b:9a:9c:54:f3:54:0b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=5696605713858560-fe4.pantheonsite.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:b3:43:87:45:99:8a:7e:05:39:2b:9a:9c:54:f3:54:0b
Serial Number (int): 326228789949033628112453816186076879082507
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:c9:0d:15:a8:e9:df:c9:b4:7b:80:78:15:b0:6c:9a:4a:f2:ed:fc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a0:aa:be:75:84:9f:6a:48:bf:8b:92:2e:eb:47:ee:2a:9c:94:15:c4
Fingerprint (sha256): 3c:47:63:47:98:04:7e:fc:3c:ff:01:38:1f:ac:0d:d7:b5:16:bc:18:85:4d:8b:e5:76:da:60:06:b2:62:07:91

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 5696605713858560-fe4.pantheonsite.io

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 5696605713858560-fe4.pantheonsite.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

150w.berkeley.edu
500.spearswms.com
5696605713858560-fe4.pantheonsite.io
agyeya.berkeley.edu
anthropology.berkeley.edu
api.eztexting.com
apply.mgait.in
betacanada.net
bormel-grice.com
building.berkeley.edu
calso.housing.berkeley.edu
covenanthouse.org
d3jeg3a2t66ye0.cloudfront.net
demo.personalrecharge.com
dev-wireless.pantheon.berkeley.edu
dev.farmcommons.org
ecalso.berkeley.edu
ets.ucsb.edu
etudiezenligne.dev.marsworks.com
ez-pillar.eztexting.com
eztexting.com
feslab.me.ucsb.edu
fossa.io
gbo.berkeley.edu
give.lib.berkeley.edu
gotourny.com
graymatterlab-staging.sfsu.edu
heartworksgala.net
humanrights.berkeley.edu
indiancities.berkeley.edu
jimforiowa.com
jobsight.org
leep.berkeley.edu
lsc.berkeley.edu
mass.ucsb.edu
masterstouchpestsolutions.com
matrix.berkeley.edu
melbournekids.net.au
new-designs.com
optasy.com
patriotfoundry.com
people2013.chicagoreader.com
research.berkeley.edu
ryanadamsgroup.com
s.berkeley.edu
sinberbest.berkeley.edu
slavic.berkeley.edu
software-central.berkeley.edu
software.berkeley.edu
sons.berkeley.edu
southasia.berkeley.edu
stafforg.berkeley.edu
summerfest.berkeley.edu
systems.berkeley.edu
techfee.berkeley.edu
techfund.berkeley.edu
teleimmersion.berkeley.edu
test.farmcommons.org
thinking.marketstreet.design
travel.berkeley.edu
truckworld.ca
truckworldshow.com
uhspolicies.berkeley.edu
uroc.berkeley.edu
us.hugessen.com
vance-lab.berkeley.edu
vancelab.berkeley.edu
wellnessfee.berkeley.edu
wellnessfund.berkeley.edu
www.anthropology.berkeley.edu
www.bcsm.berkeley.edu
www.betacanada.net
www.bormel-grice.com
www.cappscenter.ucsb.edu
www.covenanthouse.org
www.crnai.berkeley.edu
www.crws.berkeley.edu
www.cse.cs.ucsb.edu
www.datawarehouse.ucsb.edu
www.eastview.com
www.eztexting.com
www.fossa.io
www.gotourny.com
www.it.ucsb.edu
www.masterstouchpestsolutions.com
www.matrix.berkeley.edu
www.melbournekids.net.au
www.new-designs.com
www.noc.ucsb.edu
www.optasy.com
www.patriotfoundry.com
www.pulseandcocktails.co.uk
www.ryanadamsgroup.com
www.ryanlooper.com
www.sinberbest.berkeley.edu
www.travel.berkeley.edu
www.truckworld.ca
www.truckworldshow.com
www.wellnessfee.berkeley.edu
www.wellnessfund.berkeley.edu

Other certificates including the domain name 5696605713858560-fe4.pantheonsite.io

(limited to 100 certificates)
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
5696605713858560-fe4.pantheonsite.io

Certificate

The complete raw certificate details for 5696605713858560-fe4.pantheonsite.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ8jI/2GMzpa/KiPWJd+
i0Hl8rFl/uhj/mNKUBVmMgtTDsv7bk5+AWbzS12q81Tupbco05eulZmC23D8UUv4
eEmszSr4bJscXkD4VgkckzTJZKrUv879NyUIr+x+8XhuLpVL4iDUOXVT4ft5LITv
08M7YmfiOZkMqnTZ9EOsGq0AmxGrgKJjrqHpkwHULaMhHqaEJDamoFTGBqpA609o
6D0djtkjT8ZdZzmiHDvFR3oFRKv2664NXcMAI0fxm/Xf1PHy5fSY8ufE2tmrEvFP
6T2JrbVS6PKFdPfR7QMZ/DiPBvRAH5qVQ57DmNlDCi49fIbDP/okh+nFx9HWK1in
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326228789949033628112453816186076879082507
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-25 18:30:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-23 18:30:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5696605713858560-fe4.pantheonsite.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23361550883736045252117561803693089703592509698645070918951383796590597008659886483560755272625671268483988209421061467474057620499861510275047191962656742782951637475731951215847874677403828206074367465816500356106235334930297266215451918720905469801690099467991082930429865448850947006543122893739657313377511420669609009789400682934226504918813417107834823244164478974966872859476115300128134587305408319228164253035694533279154609722518512656817529941434978752330906587491180818904626365904647718831036804772190001347747484840760074478159560188624450790820557300819544742635408223689361845510000876184567568443221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ac90d15a8e9dfc9b47b807815b06c9a4af2edfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2254 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '150w.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '500.spearswms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5696605713858560-fe4.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agyeya.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anthropology.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.eztexting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.mgait.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betacanada.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bormel-grice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'building.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calso.housing.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covenanthouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd3jeg3a2t66ye0.cloudfront.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.personalrecharge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-wireless.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.farmcommons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecalso.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ets.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etudiezenligne.dev.marsworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ez-pillar.eztexting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eztexting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feslab.me.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fossa.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbo.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.lib.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotourny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graymatterlab-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartworksgala.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humanrights.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiancities.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jimforiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobsight.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leep.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsc.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mass.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterstouchpestsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matrix.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melbournekids.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new-designs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patriotfoundry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'people2013.chicagoreader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryanadamsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinberbest.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slavic.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software-central.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sons.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southasia.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stafforg.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summerfest.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'systems.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techfee.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techfund.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teleimmersion.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.farmcommons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinking.marketstreet.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truckworld.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truckworldshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhspolicies.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uroc.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.hugessen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vance-lab.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vancelab.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellnessfee.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellnessfund.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anthropology.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcsm.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betacanada.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bormel-grice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cappscenter.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.covenanthouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crnai.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crws.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cse.cs.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datawarehouse.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eztexting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fossa.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gotourny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.it.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masterstouchpestsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matrix.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melbournekids.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.new-designs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noc.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patriotfoundry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pulseandcocktails.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryanadamsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryanlooper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sinberbest.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travel.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truckworld.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truckworldshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellnessfee.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellnessfund.berkeley.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ea40ae3f00000040300483046022100c79a1ac747488653f749fe54134bab597a98e83e0f01dc917d9c9d67fb45c1d8022100c9a5964f605fb2f62ef86f69335f8e3a1c37db9c217cb189f77fbafca9bd0562007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ea40ae3e200000403004730450220376655958a8e354b2c15e00a8ab3990173af45596f1952dfb8e2656a6d27baf40221009469ad0eef31e7bc33ff41de711dbc312fac2b3f3a234d2d00a252a841883d02
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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