resx.usc.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:03:9b:5f:28:22:8d:18:98:a5:ad:f6:53:e1:af:26:1e:b2 was issued on by Let's Encrypt.

With 69 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=resx.usc.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:03:9b:5f:28:22:8d:18:98:a5:ad:f6:53:e1:af:26:1e:b2
Serial Number (int): 349676515249385833538822760632971367423666
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4b:77:3e:b4:29:33:64:3c:89:e4:39:a8:f1:96:ae:c5:0e:6e:ea:84
Fingerprint (sha256): 3c:f5:4d:a2:46:75:04:39:fc:6a:a9:75:44:b6:ee:7c:00:a2:75:2d:b2:8e:65:d8:e2:4c:ef:38:59:0b:78:63

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate resx.usc.edu

69

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for resx.usc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

resx.usc.edu
rmp.rutgers.edu
scilsresx.rutgers.edu
seotest.clorox.com
sites.laverne.edu
stage.nebrwesleyan.edu
stage.onlineeducation.psu.edu
stanfordsummersession.stanford.edu
stfincrease.unlv.edu
support.doctorswithoutborders.org
tango.franklin.uga.edu
test-wp.nationalreview.com
test.cam.cornell.edu
test.cee.cornell.edu
test.finance.upenn.edu
test.mae.cornell.edu
test.mse.cornell.edu
thepointalehouse.com
tl.wvu.edu
townofdiscoverybay.ca.gov
tst.laffertylab.yale.edu
updates.cjei.cornell.edu
updates.cpra.cornell.edu
upenn-it.asc.upenn.edu
virtual2.unlv.edu
vpr.arizona.edu
webdev.colorado.edu
websiteservices.watech.wa.gov
wissc.arizona.edu
www-chem.umd.edu
www.acims.arizona.edu
www.archydro.crwr.utexas.edu
www.azcc.arizona.edu
www.azspo.az.gov
www.blog.sciencenews.org
www.cbs.asu.edu
www.cie.ucdavis.edu
www.crwr.utexas.edu
www.datahero.com
www.dl.odu.edu
www.ee.udel.edu
www.ein.az.gov
www.esc.rutgers.edu
www.extension.ucdavis.edu
www.gs.utexas.edu
www.hcii.cs.cmu.edu
www.inas2.uga.edu
www.italianacademy.columbia.edu
www.jhpiego.jhu.edu
www.lhs.berkeley.edu
www.nartc.fcm.arizona.edu
www.newpiper.com
www.odee-pgmo.osu.edu
www.onlineeducation.psu.edu
www.ordbc.arizona.edu
www.pctc.washington.edu
www.projectshare.sfsu.edu
www.randybryceforcongress.com
www.resx.usc.edu
www.sisterstory.org
www.strength.org
www.summer.stanford.edu
www.support.dana.org
www.swcsc.arizona.edu
www.universityextension.ucdavis.edu
www1.ccny.cuny.edu
www2.ccny.cuny.edu
www2.president.usc.edu
www2.stkate.edu

Other certificates including the domain name usc.edu

(limited to 100 certificates)
magazine.viterbi.usc.edu
join.chla.usc.edu
myeloidcancercures.usc.edu
br-ad.usc.edu
5684453372329984-fe2.pantheonsite.io
platformsh.map.fastly.net
arr.usc.edu
moodlerooms.com
publichealthsciences.usc.edu
5755553334689792-fe2.pantheonsite.io
us.prod.campusgroups.com
teamcity.sca.usc.edu
gradweb01.provost.usc.edu
*.usc.edu
incapsula.com
hscnews.usc.edu
5682747733442560-fe3.pantheonsite.io
vhi-ndt.usc.edu
astronautics.usc.edu
lawcf.usc.edu
keck.usc.edu
calv-wac.med.usc.edu
financesup-ren.ps.chla.usc.edu
it.uahs.arizona.edu
incapsula.com
prod.6.slot.cdn.salesforce-communities.com
ucdc.edu
utilities.loni.usc.edu
us.prod.campusgroups.com
sympa-app1.usc.edu
nartc.fcm.arizona.edu
faculty.usc.edu
race.usc.edu
5670405876482048-fe3.pantheonsite.io
5689127638925312-fe4.pantheonsite.io
www.cs.usc.edu
trojantime.usc.edu
moodlerooms.com
5749563331706880-fe1.pantheonsite.io
ihlab.hsc.usc.edu
eucalyptus.usc.edu
icaros.usc.edu
5686536431468544-fe1.pantheonsite.io
create.usc.edu
uasvis.usc.edu
med-reset.usc.edu
esa2019.usc.edu
roski.usc.edu
kueskistatus.mambu.com
mist.usc.edu
lawlsfp.med.usc.edu
admission.usc.edu
blackboardopenlms.com
test.eis.uw.edu
prod.18.slot.cdn.salesforce-communities.com
robotics.usc.edu
direct1.dts.usc.edu
tls.automattic.com
pmredcap.usc.edu
libanswers.usc.edu
rossieronline.usc.edu
cmail.cntv.usc.edu
provosthr.usc.edu
5689127638925312-fe4.pantheonsite.io
it.aramex.support
scehsclab.usc.edu
SOTART.MUSE.USC.EDU
www.design-engineering.princeton.edu
mylaw.usc.edu
prod.18.slot.cdn.salesforce-communities.com
calv-dsccntweb.med.usc.edu
utilities.loni.usc.edu
primarycare.usc.edu
ame.usc.edu
5684453372329984-fe2.pantheonsite.io
pscdpm.usc.edu
mymedweb.usc.edu
mphonline.usc.edu
nxterra.ucop.edu
rossier100.usc.edu
*.rossieronline.usc.edu
amifast700.aminet.usc.edu
cps.usc.edu
CHLAEXPYEDGE1.chla.usc.edu
incapsula.com
empoweredtech.usc.edu
www.uschotel.usc.edu
uasfin.usc.edu
dornsife.usc.edu
scalefunder.net
inklab.usc.edu
span.usc.edu
tls.automattic.com
facultypositions-test.usc.edu
*.usc.edu
libcal.usc.edu
www.hcii.cs.cmu.edu
ppd8.sppd.usc.edu
incapsula.com
prod.16.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for resx.usc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349676515249385833538822760632971367423666
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-02 13:13:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-31 13:13:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'resx.usc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1573 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmp.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scilsresx.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seotest.clorox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.laverne.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanfordsummersession.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfincrease.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tango.franklin.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-wp.nationalreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cee.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.finance.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepointalehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tl.wvu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townofdiscoverybay.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.laffertylab.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.cjei.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.cpra.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upenn-it.asc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtual2.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpr.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdev.colorado.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websiteservices.watech.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wissc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-chem.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acims.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archydro.crwr.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azcc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azspo.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blog.sciencenews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbs.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cie.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crwr.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datahero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dl.odu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ee.udel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ein.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esc.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gs.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcii.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inas2.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.italianacademy.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhpiego.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lhs.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newpiper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odee-pgmo.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ordbc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pctc.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectshare.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.randybryceforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sisterstory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strength.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summer.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.support.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swcsc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universityextension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.president.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.stkate.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001825ee760240000040300483046022100f15c543c5a132408dfb450b8aff9dd91bd3a45f9bddf2c226da70925cb0a6ca4022100c9d56a48e2c58c49c9ba7013f5c8a5f853748a9fa74973a7c9eefac8d78519ea0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001825ee7607e0000040300483046022100f905fab2ce889e6ff0cb32cc5a4f9c5db0bcc5c4f51090e0bd9cb1b9e9536a16022100ba6773b077328e345b43438d55576918cba155774b425b6f7b4eb3aff4e2c7c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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