secure.mdl.io

- Mindfireinc -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 77:72:17:5e:a0:7d:54:96:00:00:00:00:50:ed:15:54 was issued on by Entrust, Inc..

With 137 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Mindfireinc

Organization: Mindfireinc
State / Province: California
Locality: Irvine
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 77:72:17:5e:a0:7d:54:96:00:00:00:00:50:ed:15:54
Serial Number (int): 158770527332815236299136213085594654036
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 9a:13:14:db:99:98:0b:ca:72:c5:b4:d2:50:6e:65:b0:a8:f3:49:52
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): cd:3c:26:6b:04:18:12:24:0f:1c:d0:93:d4:09:e7:ca:c2:26:d6:85
Fingerprint (sha256): 40:fe:a7:5c:86:b1:e5:50:e4:2f:4a:58:62:62:ba:f5:7d:9d:f8:07:dc:ac:f1:11:7e:cc:75:96:d6:a5:8e:f1

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate secure.mdl.io

137

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.mdl.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.mdl.io
letsgo.lasell.edu
www.albion-college.com
www.BHGLoan.com
be.tabor.edu
www.BHGcards.com
www.bhgloans.com
www.BHGProLoan.com
www.borrowelastic.com
www.bhgpowercard.com
defineURLIFE.peace.edu
discover.onetoone.group
elevateuploader.com
go.monmouthcollege.edu
go.samford.edu
www.igive2epic.com
studio.mdl.io
welcometothefamily-customerdirect.m.mdl.io
petcothinkadoptionfirst.m.mdl.io
studio.afw.mdl.io
studio.dashboard.mdl.io
studio.admin.mdl.io
studio.purl.mdl.io
microsite.container.mdl.io
members.championshipcommitment.com
www.mybhgcards.com
www.mycapitalnow.com
www.nominatestudentleaders.com
quote.onetoone.group
rxgames.leehealthfoundation.org
www.smhf-givegratitude.org
tracking.mdl.io
www.supportecfs.org
www.supporthm.org
applymjur.stmarytx.edu
urpromises.thomas.edu
*.my-dv.com
your.lr.edu
www.BHGLending.com
www.grouplegalplanoffer.com
www.investdbq.com
rewards.kewadin.com
www.applyelastic.com
itspersonal.martinmethodist.edu
be.hendrix.edu
www.metpdpnetworkdev.com
www.bhgandbanks.com
www.metpdp.com
www.lake-watch.com
getsxm.com
igive2epic.com
www.getsxm.com
monitor.mdl.io
werhome.oc.edu
www.mobltycarpetone.com
elephants.win2wild.com
hippos.win2wild.com
rhinos.win2wild.com
www.btpeds.org
www.givingmu.com
citidemo.sandyinc.com
www.myprobucksgift.com
www.welcometoharvey.com
*.secure.mdl.io
www.edwardsupdate.ca
apply.keystone.edu
promise.keystone.edu
getinfo.cps.gwu.edu
www.lvcscholarship.com
optin.onestarrewards.com
www.keepitfrosty.com
www.BHGPersonal.com
theedge.guilford.edu
belongat.bw.edu
visit.bw.edu
www.firespringpromo.com
mymccalling.com
TFCadventure.com
DiscoverLACollege.com
theBCdifference.com
faulknerlawschool.com
discoverShorter.com
BPCforMe.com
TransfertoMC.com
YourMCcalling.com
flavors.centrisfcu.org
bstrong.wtamu.edu
extraordinary.rmc.edu
www.backtohastings.com
motiontosucceed.com
www.wpc4cc.com
www.supportsacredheartgreenwich.org
www.supportsbp.org
give.dwight.edu
www.cornhuskerbankpowerchecking.com
www.metdhmo.com
experience.coker.edu
darden-rfp.sandyesademo.com
imustgo.mhu.edu
www.getrisecredit.com
www.myemprisebank.com
go.belmontabbeycollege.edu
www.helpyourretirement.com
www.coffeewithtravis.com
www.fdlcrewards.com
www.arcfulfill.com
*.getkasasacash.com
*.getkasasacashback.com
www.yourelastic.com
www.c1mm.com
louisianacollegedigital.com
shorterudigital.com
onelimestone.com
www.rittersoffer.com
www.explorehpu.com
www.explorebrenau.com
www.explorewwc.com
www.explorewestminster.com
www.yourloyola.com
www.gohusson.com
www.explorelesley.com
www.explorelvc.com
www.discoveraic.com
www.youbelongatwells.com
www.gonewmanu.com
www.explorenewcollege.com
www.thinkmeredith.com
connect.linfield.edu
www.championshipcommitment.com
*.getkasasaloans.com
lifecall.truett.edu
opportunity.shawu.edu
weare.su.edu
www.powerchecking.net
app.beaconcollege.edu
www.mbugifted.org
designers.laserimagenc.com

Other certificates including the domain name mdl.io

(limited to 100 certificates)

Certificate

The complete raw certificate details for secure.mdl.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X9cpajqFgEdCZ+iMC5T
aEIIuxqEa/HN0ofFmq/lqtp33ja+FvPxWJMQom+knM8V7SCuVvZmB4SsBS0WuM3/
tvS10KhAU2Ffzp1YWoxiFyRXgbKcqGAhBw22bOrtWBSWUK/fdMoxp76xtCB9SsB/
qZfsianbV02APBVR/Qfy+FTgAGMLnWb9TUTNX5Pltv12qOTYTCDYRVM6wzyeddgA
rqP/c3JJF17EWopm/EVdFvEBv19TAduh3LN3BKZnrb7UVITRxs1ouwimoSgxx49B
Fm9FujTdykxdvr1q9zNH15NQCB9Al/Np6rEWjVIqM39UgI/muzaj3YdowDukQmRd
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158770527332815236299136213085594654036
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-01 20:01:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-21 20:31:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Irvine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mindfireinc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.mdl.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26951563452781109146057106392320226867107000374229101798015474952460603726911991854852083812187781988271179003750789017090612383066931286354568744127269341469194633587084064186594382380309598888000395093878687446126016630170284238938965547827285598923799327864755580089993702511150115546208965454260860994738074217442916082208995375929856279017354403501537507855236546290516823457160534480645279233472204278201703889873993923035009212008348742274919543512527007662929090692110470340849541123982874948530651309660094007907158238537985025279028193304796415915389367590604571312619101468167282531565955541987601938668817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2994 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letsgo.lasell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albion-college.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGLoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.tabor.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGProLoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borrowelastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgpowercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defineURLIFE.peace.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.onetoone.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elevateuploader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.monmouthcollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.samford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igive2epic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcometothefamily-customerdirect.m.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petcothinkadoptionfirst.m.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.afw.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.dashboard.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.admin.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.purl.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsite.container.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.championshipcommitment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybhgcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycapitalnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nominatestudentleaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quote.onetoone.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxgames.leehealthfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smhf-givegratitude.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportecfs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supporthm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applymjur.stmarytx.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urpromises.thomas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my-dv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'your.lr.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGLending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grouplegalplanoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investdbq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewards.kewadin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applyelastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itspersonal.martinmethodist.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.hendrix.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metpdpnetworkdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgandbanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metpdp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lake-watch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getsxm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igive2epic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getsxm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werhome.oc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobltycarpetone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elephants.win2wild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hippos.win2wild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhinos.win2wild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.btpeds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingmu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citidemo.sandyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myprobucksgift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welcometoharvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edwardsupdate.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.keystone.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promise.keystone.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getinfo.cps.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvcscholarship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optin.onestarrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepitfrosty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGPersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theedge.guilford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belongat.bw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visit.bw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firespringpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymccalling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'TFCadventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DiscoverLACollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theBCdifference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faulknerlawschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverShorter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'BPCforMe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'TransfertoMC.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'YourMCcalling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flavors.centrisfcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bstrong.wtamu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extraordinary.rmc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.backtohastings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motiontosucceed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wpc4cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportsacredheartgreenwich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportsbp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.dwight.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornhuskerbankpowerchecking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metdhmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.coker.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darden-rfp.sandyesademo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imustgo.mhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getrisecredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myemprisebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.belmontabbeycollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helpyourretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coffeewithtravis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdlcrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcfulfill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getkasasacash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getkasasacashback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourelastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.c1mm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisianacollegedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shorterudigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onelimestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rittersoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorehpu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorebrenau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorewwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorewestminster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourloyola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gohusson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorelesley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorelvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoveraic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youbelongatwells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gonewmanu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorenewcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinkmeredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.linfield.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.championshipcommitment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getkasasaloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifecall.truett.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opportunity.shawu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weare.su.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.powerchecking.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.beaconcollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbugifted.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designers.laserimagenc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000168aac21cc7000004030047304502200d2eb24a28c5ed99b0421bdb0f253243411223dc44f03832904f3fc6060b17ba0221008c6214abd7711bc23ffc9d1b8331d4ec4ee459adfd59685c6c04450f57164ae80077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000168aac21cef0000040300483046022100f807c4426807c7940369ecc057491d8c223ed34f47fb311d323c0de4257f80eb0221008b205b3cd7284c3d402e564e7671f7a930a9264ca4c5712a9663d1329e014c2d007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000168aac21cb90000040300483046022100c40ac49965d747a1ac3c6289cc85c9fc752054c00fd87bfd8296389ca91031cf022100fcb334fa256b5ddfb08d869e9c620a52a0bc79c14d3ba17bfc2afc83a1f313e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a1314db99980bca72c5b4d2506e65b0a8f34952
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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