it-chat.web.arizona.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:ef:4a:e6:2e:28:ab:b7:0b:6b:53:6a:ee:5d:72:25:8a:eb was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=it-chat.web.arizona.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ef:4a:e6:2e:28:ab:b7:0b:6b:53:6a:ee:5d:72:25:8a:eb
Serial Number (int): 429876187457323937631769269218336756304619
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8b:3c:59:82:ee:82:6f:d9:da:bf:3f:f0:2e:79:80:5b:d7:f3:9d:df
Fingerprint (sha256): 41:9a:e6:7f:49:42:ce:5d:7e:a9:8b:b4:9a:48:42:08:a6:f6:2a:58:cc:b2:66:57:9c:d5:b4:db:51:e6:66:32

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate it-chat.web.arizona.edu

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for it-chat.web.arizona.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

it-chat.web.arizona.edu
it.uahs.arizona.edu
itcatalyst.sfsu.edu
jwplayer.essence.com
kissingbug.arizona.edu
labellelab.asu.edu
lambda.usc.edu
landing.pacific.edu
law.ss.pacific.edu
ldap.cscc.unc.edu
legacy.bricartsmedia.org
liberalarts.ss.pacific.edu
live-orientation.pantheon.io
live.aep.cornell.edu
live.bme.cornell.edu
live.cam.cornell.edu
live.engineering.cornell.edu
live.ophd.pantheon.berkeley.edu
live.ucdavis.edu
lp.grad.online.udel.edu.help
lp.programs.carey.jhu.edu.help
m.ajc.org
makinghistory.gwu.edu
management.arizona.edu
marketing.magicsoftware.com
mediaroom.livestrong.org
mediasandbox.cas.msu.edu
meetingsqa.aaas.org
mindsmatter.civicaction.ca
mobile-data.skyandtelescope.com
mt.nokidhungry.org
mtageniustransitchallenge.ny.gov
multidevcom.uaf.edu
nanophotonics.asu.edu
nartc.fcm.arizona.edu
nesst.asu.edu
new.yearup.org
news.ged.com
nistmep.blogs.govdelivery.com
nxterra.ucop.edu
odl.rutgers.edu
oist.ucsb.edu
oldsite.itu.edu
online-crm.cu.edu
online.asu.edu
online.foodsafety.msu.edu
ordbc.arizona.edu
pcp.sonoranucedd.fcm.arizona.edu
peaceways.yale.edu
pentest.web.arizona.edu
pharmacy.ss.pacific.edu
phd.antioch.edu
pophealth.uahs.arizona.edu
powertest.ctd.northwestern.edu
preview.brand.cals.cornell.edu
procomm2018.utoronto.ca
programs.carey.jhu.edu
projectshare.sfsu.edu
psp.sandiegozoo.org
qa.californiasciencecenter.ca.gov
qa.canceratlas.cancer.org
querybuilder.appcelerator.com
radsafe.berkeley.edu
rc.library.osu.edu
readiness.osu.edu
religion.berkeley.edu
research-pp.stonybrook.edu
resx.usc.edu
reweb.archbalt.org
rheumatology.utoronto.ca
rmp.rutgers.edu
robot.thepointsguy.com
rpgp.berkeley.edu
rstinstruments.rstinstruments.com
rstinstrumentsinfo.rstinstruments.com
scilsresx.rutgers.edu
sdgs-staging.scout.org
sexgenderlab.human.cornell.edu
smagent.ctd.northwestern.edu
stage.courts.ca.gov
stage.nebrwesleyan.edu
stage.onlineeducation.psu.edu
stanfordsummersession.stanford.edu
states.drugpolicy.org
stfincrease.unlv.edu
support.doctorswithoutborders.org

Other certificates including the domain name arizona.edu

(limited to 100 certificates)
5734743547052032-fe3.pantheonsite.io
5698998010642432-fe4.pantheonsite.io
webservice.oscr.arizona.edu
5658514613600256-fe2.pantheonsite.io
5693703389708288-fe3.pantheonsite.io
drc-dev.arizona.edu
*.ezproxy2.library.arizona.edu
test-web-lws.edu.help
p21.uawebhost.arizona.edu
carpepm.almonds.com
photonicshub2.uawebhost.arizona.edu
primatefieldschool.uawebhost.arizona.edu
5697124062724096-fe2.pantheonsite.io
5767917874446336-fe1.pantheonsite.io
5767917874446336-fe1.pantheonsite.io
5703128158568448-fe1.pantheonsite.io
usif.arizona.edu
aer.arizona.edu
5723088213770240-fe3.pantheonsite.io
it.uahs.arizona.edu
pictor.as.arizona.edu
accona-idrac.fm.arizona.edu
helpdesk.travelleaders.com
cluster3.technolutions.net
remote.azgs.arizona.edu
helpdesk.travelleaders.com
imr.uawebhost.arizona.edu
libguides.library.arizona.edu
5631943370604544-fe1.pantheonsite.io
mis-mallinfra1.microagelab.arizona.edu
5702351037923328-fe2.pantheonsite.io
5720453519769600-fe1.pantheonsite.io
5685665089978368-fe3.pantheonsite.io
ucdc.edu
cluster3.technolutions.net
5733052001026048-fe3.pantheonsite.io
survey.pharmacy.arizona.edu
5643365030821888-fe1.pantheonsite.io
5685665089978368-fe3.pantheonsite.io
nartc.fcm.arizona.edu
5732910535540736-fe1.pantheonsite.io
xlr7.lpl.arizona.edu
azmesa.arizona.edu
tinker.lpl.arizona.edu
in.arizona.edu
calendar.sdzsafaripark.org
5763210187636736-fe2.pantheonsite.io
amonhen-th-01.ucode.arizona.edu
legacy.fso.arizona.edu
5700866052980736-fe2.pantheonsite.io
l3.shared.global.fastly.net
jsw.arizona.edu
5723088213770240-fe3.pantheonsite.io
ba-vpn.lpl.arizona.edu
data.library.arizona.edu
consciousness.arizona.edu
housing.arizona.edu
5743114304094208-fe3.pantheonsite.io
5693341270278144-fe4.pantheonsite.io
cls.uawebhost.arizona.edu
skycenter.arizona.edu
vas.uawebhost.arizona.edu
samis.webhost.uits.arizona.edu
5685665089978368-fe3.pantheonsite.io
5679846214598656-fe1.pantheonsite.io
5763210187636736-fe2.pantheonsite.io
mesupport.saloncloudsplus.com
cesd.arizona.edu
udallcenter.uawebhost.arizona.edu
www2.engr.arizona.edu
5650082896543744-fe3.pantheonsite.io
*.playposit.com
5693703389708288-fe3.pantheonsite.io
5689792285114368-fe2.pantheonsite.io
5736449051721728-fe1.pantheonsite.io
law.arizona.edu
accounting.eller.arizona.edu
5754818358411264-fe2.pantheonsite.io
5662329727352832-fe1.pantheonsite.io
5721489412194304-fe1.pantheonsite.io
psi.arizona.edu
banking-business-review.com
5650082896543744-fe3.pantheonsite.io
5636635823702016-fe2.pantheonsite.io
apps.iam.arizona.edu
5692201761767424-fe3.pantheonsite.io
portal.environment.arizona.edu
5747976207073280-fe2.pantheonsite.io
cdn-test.battlefields.org
rds.athletics.arizona.edu
test.eis.uw.edu
aemrc.arizona.edu
cybersw.org
5703128158568448-fe1.pantheonsite.io
5634612826996736-fe4.pantheonsite.io
5734743547052032-fe3.pantheonsite.io
5668906396024832-fe3.pantheonsite.io
5639026912526336-fe4.pantheonsite.io
*.mosaic.arizona.edu
r-barthelson-lab.uawebhost.arizona.edu

Certificate

The complete raw certificate details for it-chat.web.arizona.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429876187457323937631769269218336756304619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-09 22:17:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-07 22:17:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'it-chat.web.arizona.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2078 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-chat.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcatalyst.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwplayer.essence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kissingbug.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labellelab.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambda.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldap.cscc.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.bricartsmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberalarts.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-orientation.pantheon.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.bme.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.engineering.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.grad.online.udel.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.programs.carey.jhu.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ajc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'management.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.magicsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaroom.livestrong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediasandbox.cas.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetingsqa.aaas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindsmatter.civicaction.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-data.skyandtelescope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mt.nokidhungry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtageniustransitchallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanophotonics.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nesst.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.yearup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.ged.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nistmep.blogs.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nxterra.ucop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odl.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oist.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldsite.itu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-crm.cu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.foodsafety.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordbc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcp.sonoranucedd.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peaceways.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pentest.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacy.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phd.antioch.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pophealth.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powertest.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.brand.cals.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procomm2018.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programs.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectshare.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psp.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.californiasciencecenter.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.canceratlas.cancer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'querybuilder.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsafe.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.library.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readiness.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religion.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research-pp.stonybrook.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reweb.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmp.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robot.thepointsguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpgp.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstruments.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstrumentsinfo.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scilsresx.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdgs-staging.scout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexgenderlab.human.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smagent.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.courts.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanfordsummersession.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'states.drugpolicy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfincrease.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0079769106eb9de146be8509c13c76dc1d27c2911a212e3e80febabd41081a594a0a0f310d40ae08c2805b4091c2d1fb2c1ef9d3a1661b2d79dd7753c22f77653473da57beee761ef245efa2515e4ddd205297c24cdd0d2daf4eee06bb0b831c6f090c957aba7ceb782ed9a3b830a42d8d0d214510148c61a4eebd9ca12ad15cec913b865a789643904a5c2260d115016de6dd2aeeaa2ec7278f397250070be04f9472fe3f0081fef5ee1c8abec3d1e7539a5953e6df4c259e19340e6db2c134c8694ed4c700cc8a3575a27af544df7e531ee94770732f8a27eda0cd5c63f7edee151ba9aac381e6ca42b5257f4b910fce6ce1efddfa794dd060ba69381203dc6f