acquia-sites.com

- Acquia Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 08:60:19:f5:4f:4e:e3:72:37:1b:80:22:67:36:dc:d6 was issued on by DigiCert Inc.

With 119 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Acquia Inc

Organization: Acquia Inc
Organization unit: Acquia Hosting
State / Province: Massachusetts
Locality: Burlington
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:60:19:f5:4f:4e:e3:72:37:1b:80:22:67:36:dc:d6
Serial Number (int): 11132810960383263796000238928341163222
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e8:e9:79:2d:d9:41:2a:72:fb:fc:f6:b4:81:da:12:a5:d5:99:6b:e0
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 83:19:2b:28:98:64:4c:c5:84:11:96:5b:57:00:b3:00:dd:8c:ae:df
Fingerprint (sha256): 41:5e:e0:c6:25:75:96:b2:1b:3d:16:62:41:62:7e:78:85:05:7b:37:31:d0:87:3d:26:05:97:32:b3:82:08:a6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g4.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g4.crl

Check the revocation status for certificate acquia-sites.com

119

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acquia-sites.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acquia-sites.com
jaspan.com
www.historytoday.com
trainlikeanastronaut.org
www2.wwt.com
www2-test.wwt.com
www.pega.com
staging.pega.com
www.sanduskyregister.com
www.norwalkreflector.com
www.rifftrax.com
www.grandhaventribune.com
www.ise.gov
www.daily.newlook.com
houseandhome.com
daily.newlook.com
ussecstg.prod.acquia-sites.com
auth.rcmusic.ca
performance.rcmusic.ca
www.nebrwesleyan.edu
dev.nebrwesleyan.edu
www.novusbio.com
www.uarts.edu
uarts.edu
sites.sfsu.edu
devonbrc.com
www.extension.harvard.edu
www.stfx.ca
novusstg.prod.acquia-sites.com
origin.novusbio.com
www.cramersportsmed.com
www.summer.harvard.edu
stage.rita.dot.gov
www.timex.com
pega.com
ifcj.prod.acquia-sites.com
www.theblessedlife.com
preparecenter.org
stg.preparecenter.org
hpdev.hunterindustries.com
staff.aljazeera.com.tr
dev.carilionclinic.org
staging.carilionclinic.org
timex.co.uk
timex.ca
www.unavidadebendicion.com
radash.acquia.com
carilionclinic.org
www.carilionclinic.org
carilion.com
www.carilion.com
www.lketest.com
www.lkedev.com
nebrwesleyan.edu
intralinks.com
wwwstage.intralinks.com
www.zyrtec.com
zyrtec.com
m.zyrtec.com
www.visine.com
visine.com
www.my-coach.com
my-coach.com
www.californiaclosets.com
www.ncg.coop
ncg.coop
ncga.coop
www.ncga.coop
www.powerbar.com
www.powerbar.ca
staging.autismspeaks.org
powerbar.com
powerbar.ca
cambridgecollege.edu
www.generalcatalyst.com
johnsonsbaby.com.br
www.johnsonsbaby.com.br
manhattan.edu
www.manhattan.edu
stage.showcasecinemas.com
dev.showcasecinemas.com
fsg.org
www.fsg.org
lancope.com
buytaert.net
www.buytaert.net
www.gepowerconversion.com
enterprisersproject.com
www.enterprisersproject.com
www.outsideonline.com
www.opensource.com
usnrc-ramp.com
www.usnrc-ramp.com
messagesystems.com
varnish-software.com
www.varnish-software.com
dev.varnish-software.com
stage.varnish-software.com
opensource.com
edit.zyrtec.com
schusterman.org
www.schusterman.org
www-sys.iesabroad.org
www-uat.iesabroad.org
jjvc.ru
www.jjvc.ru
essent.us
www.essent.us
www-stage.essent.us
www-dev.essent.us
corpwebtest.lge-ku.com
corpwebdev.lge-ku.com
drupal.com
www.drupal.com
gatewaypeople.com
enercare.ca
www.enercare.ca
demo.globalcanvaseducation.com
globalcanvaseducation.com

Other certificates including the domain name acquia-sites.com

(limited to 100 certificates)
acquia-sites.com
acquia-sites.com
acquia-sites.com
datamedicaid.prod.acquia-sites.com
acquia-sites.com
staging.ensco.com
www-stage.anzacmemorial.nsw.gov.au
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
achievesdtcgjdnbrbp.devcloud.acquia-sites.com
mbrdev.prod.acquia-sites.com
www.stg.solocal.com
tplwebsitestg.prod.acquia-sites.com
raritanvalstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
batterseadev.prod.acquia-sites.com
aupairworld.prod.acquia-sites.com
www.dev.solocal.com
www.stg.solocal.com
premiereprep.com
acquia-sites.com
ee.dustindev.com
cloudapi.enterprise-g1.acquia-sites.com
batterseadev.prod.acquia-sites.com
stewardcommunity.prod.acquia-sites.com
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
planetpaymentprod.prod.acquia-sites.com
trocairestg.prod.acquia-sites.com
tsysitesdev.prod.acquia-sites.com
tplwebsitestg.prod.acquia-sites.com
acquia-sites.com
milgardstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
rrd8multidev.prod.acquia-sites.com
pnwdsstg.prod.acquia-sites.com
www.dev.solocal.com
acquia-sites.com
useastucc5.acquia.com
www.anzacmemorial.nsw.gov.au
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
newhousedev.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
firstnamesgrouptest.devcloud.acquia-sites.com
acquia-sites.com
jfkldev.prod.acquia-sites.com
acquia-sites.com
cloudapi.trex-prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
quickanddirtytipsdev.prod.acquia-sites.com
acquia-sites.com
stewardcommunity.prod.acquia-sites.com
acquia-sites.com
oitcomms.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
univadisstg.prod.acquia-sites.com
useastucc5.acquia.com
datacms.prod.acquia-sites.com
acquia-sites.com
tplwebsitedev.prod.acquia-sites.com
bmistg.prod.acquia-sites.com

Certificate

The complete raw certificate details for acquia-sites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11132810960383263796000238928341163222
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Burlington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acquia Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acquia Hosting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acquia-sites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 793741989453921577137981195430090410740164696260924385358058574856072487236598580713365886541062181880762248451248741665024425428628646959062741439430773671064066762075127577938089522953063548074856671704360674057158373171196980668742824034650341151851563923672268518625292957029467616256123775424568094293092913976524838880170129418931248247093044454118018230110534531906957573381232418023756449168658986105241473657282226889302903013721980726142226917278060322384194404757390178538081748090252416236752618579075540816325686258984078286748377822561862046133486937816321640100388888952333865357852633138459317392001748452499505474273033603063212884116555209396132210154925319751183911877017653168834355386652178574870740836185827289097542785749729573296093451806221994692929277305019332994575972991660110078955331683744577060076280149221358774723628922823973269070913338688852442711374284537871452401348502800202417480087222964545418634913878846411780904049364836928252979453335581855627351739324735845769844004247223543641342549567902700412348116354070489709154054400109110916533916840016172115618021204486571941860496686161475812142258129298585746470851914707456500234060242986800573727604477646521866027241285699876955712135279469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8e9792dd9412a72fbfcf6b481da12a5d5996be0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2314 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaspan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historytoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trainlikeanastronaut.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.wwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2-test.wwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.pega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanduskyregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norwalkreflector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rifftrax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandhaventribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ise.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daily.newlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseandhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daily.newlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ussecstg.prod.acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.rcmusic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performance.rcmusic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novusbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devonbrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extension.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfx.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novusstg.prod.acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.novusbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cramersportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summer.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.rita.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifcj.prod.acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theblessedlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preparecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.preparecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpdev.hunterindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff.aljazeera.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.carilionclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.carilionclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timex.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timex.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unavidadebendicion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radash.acquia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carilionclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carilionclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carilion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carilion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lketest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lkedev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intralinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwstage.intralinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zyrtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zyrtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.zyrtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-coach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-coach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.californiaclosets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncg.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncg.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncga.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncga.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.powerbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.powerbar.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.autismspeaks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerbar.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgecollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generalcatalyst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsonsbaby.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnsonsbaby.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhattan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manhattan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.showcasecinemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.showcasecinemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lancope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buytaert.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buytaert.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gepowerconversion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprisersproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enterprisersproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.outsideonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opensource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usnrc-ramp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usnrc-ramp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messagesystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varnish-software.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.varnish-software.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.varnish-software.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.varnish-software.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opensource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.zyrtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schusterman.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schusterman.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-sys.iesabroad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.iesabroad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jjvc.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jjvc.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essent.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.essent.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stage.essent.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.essent.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpwebtest.lge-ku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpwebdev.lge-ku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drupal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drupal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatewaypeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enercare.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enercare.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.globalcanvaseducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalcanvaseducation.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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