2fadmin.govdelivery.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ef:14:36:3f:3e:5d:49:d3:19:90:88:e3:12:2b:4b:1a:23 was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=2fadmin.govdelivery.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:ef:14:36:3f:3e:5d:49:d3:19:90:88:e3:12:2b:4b:1a:23
Serial Number (int): 342691209716063914366097000381739036252707
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:a7:30:22:60:b8:bb:18:b0:b5:6f:68:a3:cc:39:72:13:cb:22:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): eb:f1:ae:08:df:fb:0d:f5:d6:a4:fd:b8:d0:2f:96:25:64:d5:5a:8d
Fingerprint (sha256): 41:d7:00:86:98:c6:f9:6f:ab:b3:f8:11:92:96:f5:5c:78:e0:a2:d6:93:33:03:bc:0c:22:88:83:78:76:60:90

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 2fadmin.govdelivery.com

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 2fadmin.govdelivery.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2fadmin.govdelivery.com
agd.nebrwesleyan.edu
altair.gsm.cornell.edu
art.nebrwesleyan.edu
blog.aclupa.org
c.ns.christiancentury.org
cadev.oceana.org
campus.connorsstate.edu
cancer-centre.ed.ac.uk
cddrl-live-fsid9.fsi.stanford.edu
cisac-live-fsid9.fsi.stanford.edu
clinic-test.nunm.edu
cmip.ucar.edu
comminfo.gsm.cornell.edu
croci.nysenate.gov
cyber-live-fsid9.fsi.stanford.edu
dev-partnership.hsj.co.uk
dev-ping.vumc.org
dev-study.gsm.cornell.edu
dev.bcd.gsm.cornell.edu
edvancesf-staging.sfsu.edu
fcs.fia.org
flo.livestrong.org
fundraising.livestrong.org
good.govdelivery.com
gpvpn.rcrcnet.org
guestportal.earthjustice.org
gw.earthjustice.org
healthkick.marsdd.com
healthpolicy-live-fsid9.fsi.stanford.edu
innovation.yu.edu
lester.ufcespanol.com
login.gsm.cornell.edu
mail2.ardms.org
mc.worldvision.org
mdm.rockhurst.edu
mfa-music.vcfa.edu
napoleon.ufcespanol.com
neuroscience-test-ki.stanford.edu
new.actorsfund.org
neworleans-prod.adl.org
news.appcelerator.com
occupational-therapy.advanceweb.com
ourforums.earthjustice.org
page.ufcespanol.com
persaud.crm.nysenate.gov
policiesandpracticedirectives-staging.sfsu.edu
presidential-search-staging.sfsu.edu
pubtogel.fronterasdesk.org
research.eap.ucop.edu
rock.ns.christiancentury.org
roma.catholicreview.org
sccei-live-fsid9.fsi.stanford.edu
slot-gacor-5000.gsm.cornell.edu
smallbiz.legalshield.com
staff2.cce.cornell.edu
summit.gaia.com
sydney-msc.morningsidecenter.org
tec-live-fsid9.fsi.stanford.edu
test-respiratoryforum.hsj.co.uk
testjsureports.jsums.edu
westernnoyce-staging.sfsu.edu
wn.koaa.com
www.altair.gsm.cornell.edu
www.art.nebrwesleyan.edu
www.dev-study.gsm.cornell.edu
www.dev.bcd.gsm.cornell.edu
www.ews.sreb.org
www.jolt.marsdd.com
www.live.gsm.cornell.edu
www.mis.eller.arizona.edu
www.tdccbr.med.utoronto.ca
www.testjsureports.jsums.edu
wwwl.drugpolicy.org
wwwprd-sso.windriver.com

Other certificates including the domain name govdelivery.com

(limited to 100 certificates)
carpepm.almonds.com
it.uahs.arizona.edu
statuspage.io
subscriberhelp.govdelivery.com
nartc.fcm.arizona.edu
calendar.sdzsafaripark.org
3fadmin.govdelivery.com
statuspage.io
streetfilms.org
5715161717407744-fe2.pantheonsite.io
banking-business-review.com
cdn-test.battlefields.org
5742636757417984-fe1.pantheonsite.io
5638203017003008-fe2.pantheonsite.io
eu1-status.mulesoft.com
chns120.courseresource.yale.edu
5715161717407744-fe2.pantheonsite.io
208.lsnc.net
banking-business-review.com
5649952705347584-fe1.pantheonsite.io
govde-cm01.govdelivery.com
hub.meed.com
208.lsnc.net
yakamafish-star.net
eu1-status.mulesoft.com
dev.wellness.yale.edu
info-dev.calperformances.org
5699714196439040-fe2.pantheonsite.io
streetfilms.org
good.gsm.cornell.edu
5645056174194688-fe3.pantheonsite.io
nistmep.blogs.govdelivery.com
5718016125829120-fe1.pantheonsite.io
dev.embody.yale.edu
govdelivery.co.uk
expeditions.sandiegozoo.org
eu1-status.mulesoft.com
club.kjzz.org
statuspage.io
5729201025974272-fe1.pantheonsite.io
dev.wellness.yale.edu
statuspage.io
statuspage.io
academi.ufc.com
5645056174194688-fe3.pantheonsite.io
host2.openminds.com
local3599.com
5715161717407744-fe2.pantheonsite.io
communityadvancementfirm.com
208.lsnc.net
api.govdelivery.com
5718016125829120-fe1.pantheonsite.io
5699714196439040-fe2.pantheonsite.io
5742636757417984-fe1.pantheonsite.io
5649952705347584-fe1.pantheonsite.io
208.lsnc.net
statuspage.io
*.govdelivery.com
5729201025974272-fe1.pantheonsite.io
vpn-prod.granicus.com
5742636757417984-fe1.pantheonsite.io
5718016125829120-fe1.pantheonsite.io
alumnimail.albion.edu
5645056174194688-fe3.pantheonsite.io
5638203017003008-fe2.pantheonsite.io
*.blogs.govdelivery.com
2fadmin.govdelivery.com
corporatestatus.tyro.com
5638203017003008-fe2.pantheonsite.io
status.govdelivery.com
5699714196439040-fe2.pantheonsite.io
5729201025974272-fe1.pantheonsite.io
about.govdelivery.com
5638203017003008-fe2.pantheonsite.io
banking-business-review.com
inside.gc.cuny.edu
5659118702428160-fe2.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5699714196439040-fe2.pantheonsite.io
nartc.fcm.arizona.edu
eu1-status.mulesoft.com
content.govdelivery.com
statuspage.io
connect.iadb.org
abong.ufcespanol.com
origin-content.govdelivery.com
5715161717407744-fe2.pantheonsite.io
5729201025974272-fe1.pantheonsite.io
statuspage.io
5746664899870720-fe3.pantheonsite.io
statuspage.io
5715161717407744-fe2.pantheonsite.io
eu1-status.mulesoft.com
statuspage.io
5649952705347584-fe1.pantheonsite.io
5729201025974272-fe1.pantheonsite.io
acadmintest.cuofco.org
5718016125829120-fe1.pantheonsite.io
5742636757417984-fe1.pantheonsite.io

Certificate

The complete raw certificate details for 2fadmin.govdelivery.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSnemv0wZzcXAgMkBQX
ztwjNHFrHpIs5axrzzrdlw7T+GZAQLPiUvSZmF3ScRQ1Ni77M7wvvj8WKgEm6kmk
IGsqEr1NwVO/9M+bfL4ePy1ywV87Wx7ZOVVK4JWJMqctOtWZynJz3jX67Nda0+9B
++4/N4TAaLpUnxu83mMaTL+l/8yYin0iItxxZ3YRMvL8oMO9BWqFighCSszfIpRu
fGHjpEeodJZe7aLi7DcePvwyXZWi/al1YQeCdFkrpkcgk8myhP/APzQjk3bdKAlw
KQDdvQR4Y3b+bMJVibDWVrVqjLz+ybpaAJiOjKOmp9NDC6LZPJujVsE+mvYR8y2Z
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342691209716063914366097000381739036252707
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 00:23:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-14 00:23:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2fadmin.govdelivery.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295278889261962340330570593076765092564594026629510040566849443941721212705222905469227342749655760761925628146467776896918161669177237506061638055976839317974540229085566909601290432792766688540743857041618507082302908209321494362376641574366690514136936988276436757394515726000349835912320682069511736058985263380188984941851626522348036976567257123937402752130277851931257557691396509910741392947845349707974538616547869499133806197294376341097227039876415788275764051935080580783290065738507278734728703160147978353048962982659390140744073959855669537306275821116832669307766091573181749448001568724078979553621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							faa7302260b8bb18b0b56f68a3cc397213cb2214
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1929 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2fadmin.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agd.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altair.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'art.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.aclupa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.ns.christiancentury.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cadev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campus.connorsstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancer-centre.ed.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cddrl-live-fsid9.fsi.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisac-live-fsid9.fsi.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinic-test.nunm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmip.ucar.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comminfo.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'croci.nysenate.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyber-live-fsid9.fsi.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-partnership.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-ping.vumc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-study.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bcd.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edvancesf-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcs.fia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flo.livestrong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundraising.livestrong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'good.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpvpn.rcrcnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guestportal.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthkick.marsdd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthpolicy-live-fsid9.fsi.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovation.yu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lester.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail2.ardms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mc.worldvision.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdm.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfa-music.vcfa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napoleon.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuroscience-test-ki.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neworleans-prod.adl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'occupational-therapy.advanceweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourforums.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'page.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'persaud.crm.nysenate.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policiesandpracticedirectives-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presidential-search-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubtogel.fronterasdesk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.eap.ucop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rock.ns.christiancentury.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roma.catholicreview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sccei-live-fsid9.fsi.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-gacor-5000.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallbiz.legalshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff2.cce.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summit.gaia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydney-msc.morningsidecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tec-live-fsid9.fsi.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-respiratoryforum.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testjsureports.jsums.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernnoyce-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wn.koaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altair.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.art.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-study.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.bcd.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ews.sreb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jolt.marsdd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.live.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mis.eller.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tdccbr.med.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testjsureports.jsums.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwl.drugpolicy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwprd-sso.windriver.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e44db2d1c0000040300473045022079b3e5c29cd5d854ef51b4c4793b941f02b6cc55dcf35aa5e5db3cf078318a5d022100ee41185d11f54fd1b2b927424c5b8cb7c3fca3e5393a36b12040dc06a565bd1000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e44db2d220000040300463044022037c5f88a955ded0b3e0f1e7027ed6059dd89df97824999711dbfc2f2d2106af402200904e426caa352b27260c144d0a871bc3e75af66a94c7182178767c4bcb97266
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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