acquia-sites.com

- Acquia Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 02:76:60:52:8a:64:bf:11:1f:4c:f4:e4:a5:c9:75:c2 was issued on by DigiCert Inc.

With 124 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Acquia Inc

Organization: Acquia Inc
Organization unit: Acquia Hosting
State / Province: Massachusetts
Locality: Burlington
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:76:60:52:8a:64:bf:11:1f:4c:f4:e4:a5:c9:75:c2
Serial Number (int): 3273100671738944361166000827201582530
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: e8:e9:79:2d:d9:41:2a:72:fb:fc:f6:b4:81:da:12:a5:d5:99:6b:e0
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 1b:3f:35:d1:6b:a7:96:c0:a1:bd:f7:c6:8b:d3:7e:9b:25:5d:f0:9e
Fingerprint (sha256): 42:1f:ac:3b:bb:c4:f4:b4:68:ac:ae:54:10:db:af:55:4c:53:13:50:63:d4:e3:a3:98:ca:14:0f:fd:89:29:ca

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g3.crl

Check the revocation status for certificate acquia-sites.com

124

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acquia-sites.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acquia-sites.com
acquia.com
jaspan.com
sloanconsortium.org
www.chicagodrupalcamp.org
www.historytoday.com
www.starkist.com
globalccsinstitute.com
www.globalccsinstitute.com
insider.vancouversun.com
insider.ottawacitizen.com
rosicrucianegyptianmuseum.org
www.rosicrucianegyptianmuseum.org
insider.calgaryherald.com
insider.edmontonjournal.com
insider.leaderpost.com
insider.montrealgazette.com
insider.theprovince.com
insider.thestarphoenix.com
insider.timescolonist.com
insider.windsorstar.com
trainlikeanastronaut.org
www2.wwt.com
www2-test.wwt.com
www.pega.com
staging.pega.com
www.sanduskyregister.com
www.norwalkreflector.com
www.rifftrax.com
www.idonowidont.com
www.einstruction.com
www.wales.ac.uk
www.grandhaventribune.com
support.epocratesehr.com
www.ise.gov
my.precise.com
www.daily.newlook.com
www.audubon.org
houseandhome.com
911memorial.org
daily.newlook.com
ussecstg.prod.acquia-sites.com
auth.rcmusic.ca
www.911memorial.org
www.selfgrowth.com
performance.rcmusic.ca
www.americorpsconnect.org
www.power-one.com
rcmstg.com
www.nebrwesleyan.edu
dev.nebrwesleyan.edu
store.nebrwesleyan.edu
mynexusconnection.com
roost.audubon.org
solaris.nokiasiemensnetworks.com
gsbcommons.stanford.edu
www.novusbio.com
www.cooperhealth.org
onegsb.stanford.edu
www.littler.com
www.uarts.edu
uarts.edu
sites.sfsu.edu
www.lovelacehealthplan.com
store.dexcom.com
www.dexcom.com
onegsb-stage.stanford.edu
devonbrc.com
bell.babson.edu
www.extension.harvard.edu
www.stfx.ca
novusstg.prod.acquia-sites.com
www.cbrands.com
origin.novusbio.com
mygsb-stage.gsb.stanford.edu
mygsb-prod.gsb.stanford.edu
www.cramersportsmed.com
newgov.us
www.summer.harvard.edu
stage.rita.dot.gov
timex.com
www.timex.com
pega.com
ifcj.prod.acquia-sites.com
www.theblessedlife.com
preparecenter.org
stg.preparecenter.org
hpdev.hunterindustries.com
pdn-stg.pega.com
staff.aljazeera.com.tr
mycurebate.com
www.mycurebate.com
my.dexcom.com
dev.carilionclinic.org
staging.carilionclinic.org
timex.co.uk
timex.ca
www.unavidadebendicion.com
radash.acquia.com
carilionclinic.org
www.carilionclinic.org
insidecarilion.org
carilion.com
www.carilion.com
www.lketest.com
www.lkedev.com
nebrwesleyan.edu
intralinks.com
wwwstage.intralinks.com
www.offers.neutrogena.com
offers.neutrogena.com
www.zyrtec.com
zyrtec.com
m.zyrtec.com
www.visine.com
visine.com
www.my-coach.com
my-coach.com
www.californiaclosets.com
www.ncg.coop
ncg.coop
partners.ncga.coop
ncga.coop
ww.ncga.coop

Other certificates including the domain name acquia-sites.com

(limited to 100 certificates)
acquia-sites.com
acquia-sites.com
acquia-sites.com
datamedicaid.prod.acquia-sites.com
acquia-sites.com
staging.ensco.com
www-stage.anzacmemorial.nsw.gov.au
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
achievesdtcgjdnbrbp.devcloud.acquia-sites.com
mbrdev.prod.acquia-sites.com
www.stg.solocal.com
tplwebsitestg.prod.acquia-sites.com
raritanvalstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
batterseadev.prod.acquia-sites.com
aupairworld.prod.acquia-sites.com
www.dev.solocal.com
www.stg.solocal.com
premiereprep.com
acquia-sites.com
ee.dustindev.com
cloudapi.enterprise-g1.acquia-sites.com
batterseadev.prod.acquia-sites.com
stewardcommunity.prod.acquia-sites.com
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
planetpaymentprod.prod.acquia-sites.com
trocairestg.prod.acquia-sites.com
tsysitesdev.prod.acquia-sites.com
tplwebsitestg.prod.acquia-sites.com
acquia-sites.com
milgardstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
rrd8multidev.prod.acquia-sites.com
pnwdsstg.prod.acquia-sites.com
www.dev.solocal.com
acquia-sites.com
useastucc5.acquia.com
www.anzacmemorial.nsw.gov.au
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
newhousedev.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
firstnamesgrouptest.devcloud.acquia-sites.com
acquia-sites.com
jfkldev.prod.acquia-sites.com
acquia-sites.com
cloudapi.trex-prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
quickanddirtytipsdev.prod.acquia-sites.com
acquia-sites.com
stewardcommunity.prod.acquia-sites.com
acquia-sites.com
oitcomms.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
univadisstg.prod.acquia-sites.com
useastucc5.acquia.com
datacms.prod.acquia-sites.com
acquia-sites.com
tplwebsitedev.prod.acquia-sites.com
bmistg.prod.acquia-sites.com

Certificate

The complete raw certificate details for acquia-sites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQSjCCDzKgAwIBAgIQAnZgUopkvxEfTPTkpcl1wjANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0xNDAxMjIwMDAwMDBaFw0xNTAzMjUxMjAwMDBa
MIGDMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czETMBEGA1UE
BxMKQnVybGluZ3RvbjETMBEGA1UEChMKQWNxdWlhIEluYzEXMBUGA1UECxMOQWNx
dWlhIEhvc3RpbmcxGTAXBgNVBAMTEGFjcXVpYS1zaXRlcy5jb20wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDCj8ObOhrfZQ2iWiEZ5U4/cBUaWK5DE5Wa
qfP8aWVa9s++7Gg1piTE7ENWCBhzyhru2mWNfyMcEdsJReeqhhnB2Ba+cVqvhhT4
dL0DAZ6G+roOmzqvXpft9ToGNKCUchldOoA89Fbf+GfMd8NGGGC7pZNGuQZhPn3t
b+HlNz6wc6emH65D8FXEkdwXKVOZsIAUTC5qe+LsjqCbeRyYL9gm3U1Ah4GLxEUb
sDfzMEmDBPkDbjoCbb36hegxxcy/44bhczf1xQ+B+VhPoAqAlpgLOp2k02p/Oy13
QU4ozJdp4JtQAreVsrf6bhAXkMbEj6crRDYwhpyNnPso1PELo73/39uQka73zTwu
pQmafZlHr6A8iVrWauANiBYmRWHnrHp2P84sCyMzmXabfKMavU0O32afewIpbnp2
tID/qDko//5UTMqa+rDUSYgsOn/kMQVmT72+gsGuYcvhNuq279QEMfKSsrusxETn
7V4zPRupXpQnISbfcgUxRALW5rqCro9EOxh6/yHdcHGM58nXTqUq3zJJpir/TI/l
88jwkrvZhjC7o1w4LZXl6vye7MwX+DgY5Gz/uIRedZHC3BYmFvUCW/mUhlIZkl+H
OfFV1kUdmBYAXVJOg87pABE2t9138MRh+QNr9pnXSBUCvSlwxT3IobojHQtEcwpi
DU8tWL6zbQIDAQABo4ILyjCCC8YwHwYDVR0jBBgwFoAUUWj/kK8CB3U8zNllZGKi
ErhZcjswHQYDVR0OBBYEFOjpeS3ZQSpy+/z2tIHaEqXVmWvgMIIKBAYDVR0RBIIJ
+zCCCfeCEGFjcXVpYS1zaXRlcy5jb22CCmFjcXVpYS5jb22CCmphc3Bhbi5jb22C
E3Nsb2FuY29uc29ydGl1bS5vcmeCGXd3dy5jaGljYWdvZHJ1cGFsY2FtcC5vcmeC
FHd3dy5oaXN0b3J5dG9kYXkuY29tghB3d3cuc3Rhcmtpc3QuY29tghZnbG9iYWxj
Y3NpbnN0aXR1dGUuY29tghp3d3cuZ2xvYmFsY2NzaW5zdGl0dXRlLmNvbYIYaW5z
aWRlci52YW5jb3V2ZXJzdW4uY29tghlpbnNpZGVyLm90dGF3YWNpdGl6ZW4uY29t
gh1yb3NpY3J1Y2lhbmVneXB0aWFubXVzZXVtLm9yZ4Ihd3d3LnJvc2ljcnVjaWFu
ZWd5cHRpYW5tdXNldW0ub3JnghlpbnNpZGVyLmNhbGdhcnloZXJhbGQuY29tghtp
bnNpZGVyLmVkbW9udG9uam91cm5hbC5jb22CFmluc2lkZXIubGVhZGVycG9zdC5j
b22CG2luc2lkZXIubW9udHJlYWxnYXpldHRlLmNvbYIXaW5zaWRlci50aGVwcm92
aW5jZS5jb22CGmluc2lkZXIudGhlc3RhcnBob2VuaXguY29tghlpbnNpZGVyLnRp
bWVzY29sb25pc3QuY29tghdpbnNpZGVyLndpbmRzb3JzdGFyLmNvbYIYdHJhaW5s
aWtlYW5hc3Ryb25hdXQub3Jnggx3d3cyLnd3dC5jb22CEXd3dzItdGVzdC53d3Qu
Y29tggx3d3cucGVnYS5jb22CEHN0YWdpbmcucGVnYS5jb22CGHd3dy5zYW5kdXNr
eXJlZ2lzdGVyLmNvbYIYd3d3Lm5vcndhbGtyZWZsZWN0b3IuY29tghB3d3cucmlm
ZnRyYXguY29tghN3d3cuaWRvbm93aWRvbnQuY29tghR3d3cuZWluc3RydWN0aW9u
LmNvbYIPd3d3LndhbGVzLmFjLnVrghl3d3cuZ3JhbmRoYXZlbnRyaWJ1bmUuY29t
ghhzdXBwb3J0LmVwb2NyYXRlc2Voci5jb22CC3d3dy5pc2UuZ292gg5teS5wcmVj
aXNlLmNvbYIVd3d3LmRhaWx5Lm5ld2xvb2suY29tgg93d3cuYXVkdWJvbi5vcmeC
EGhvdXNlYW5kaG9tZS5jb22CDzkxMW1lbW9yaWFsLm9yZ4IRZGFpbHkubmV3bG9v
ay5jb22CHnVzc2Vjc3RnLnByb2QuYWNxdWlhLXNpdGVzLmNvbYIPYXV0aC5yY211
c2ljLmNhghN3d3cuOTExbWVtb3JpYWwub3JnghJ3d3cuc2VsZmdyb3d0aC5jb22C
FnBlcmZvcm1hbmNlLnJjbXVzaWMuY2GCGXd3dy5hbWVyaWNvcnBzY29ubmVjdC5v
cmeCEXd3dy5wb3dlci1vbmUuY29tggpyY21zdGcuY29tghR3d3cubmVicndlc2xl
eWFuLmVkdYIUZGV2Lm5lYnJ3ZXNsZXlhbi5lZHWCFnN0b3JlLm5lYnJ3ZXNsZXlh
bi5lZHWCFW15bmV4dXNjb25uZWN0aW9uLmNvbYIRcm9vc3QuYXVkdWJvbi5vcmeC
IHNvbGFyaXMubm9raWFzaWVtZW5zbmV0d29ya3MuY29tghdnc2Jjb21tb25zLnN0
YW5mb3JkLmVkdYIQd3d3Lm5vdnVzYmlvLmNvbYIUd3d3LmNvb3BlcmhlYWx0aC5v
cmeCE29uZWdzYi5zdGFuZm9yZC5lZHWCD3d3dy5saXR0bGVyLmNvbYINd3d3LnVh
cnRzLmVkdYIJdWFydHMuZWR1gg5zaXRlcy5zZnN1LmVkdYIad3d3LmxvdmVsYWNl
aGVhbHRocGxhbi5jb22CEHN0b3JlLmRleGNvbS5jb22CDnd3dy5kZXhjb20uY29t
ghlvbmVnc2Itc3RhZ2Uuc3RhbmZvcmQuZWR1ggxkZXZvbmJyYy5jb22CD2JlbGwu
YmFic29uLmVkdYIZd3d3LmV4dGVuc2lvbi5oYXJ2YXJkLmVkdYILd3d3LnN0Zngu
Y2GCHm5vdnVzc3RnLnByb2QuYWNxdWlhLXNpdGVzLmNvbYIPd3d3LmNicmFuZHMu
Y29tghNvcmlnaW4ubm92dXNiaW8uY29tghxteWdzYi1zdGFnZS5nc2Iuc3RhbmZv
cmQuZWR1ghtteWdzYi1wcm9kLmdzYi5zdGFuZm9yZC5lZHWCF3d3dy5jcmFtZXJz
cG9ydHNtZWQuY29tggluZXdnb3YudXOCFnd3dy5zdW1tZXIuaGFydmFyZC5lZHWC
EnN0YWdlLnJpdGEuZG90LmdvdoIJdGltZXguY29tgg13d3cudGltZXguY29tgghw
ZWdhLmNvbYIaaWZjai5wcm9kLmFjcXVpYS1zaXRlcy5jb22CFnd3dy50aGVibGVz
c2VkbGlmZS5jb22CEXByZXBhcmVjZW50ZXIub3JnghVzdGcucHJlcGFyZWNlbnRl
ci5vcmeCGmhwZGV2Lmh1bnRlcmluZHVzdHJpZXMuY29tghBwZG4tc3RnLnBlZ2Eu
Y29tghZzdGFmZi5hbGphemVlcmEuY29tLnRygg5teWN1cmViYXRlLmNvbYISd3d3
Lm15Y3VyZWJhdGUuY29tgg1teS5kZXhjb20uY29tghZkZXYuY2FyaWxpb25jbGlu
aWMub3JnghpzdGFnaW5nLmNhcmlsaW9uY2xpbmljLm9yZ4ILdGltZXguY28udWuC
CHRpbWV4LmNhghp3d3cudW5hdmlkYWRlYmVuZGljaW9uLmNvbYIRcmFkYXNoLmFj
cXVpYS5jb22CEmNhcmlsaW9uY2xpbmljLm9yZ4IWd3d3LmNhcmlsaW9uY2xpbmlj
Lm9yZ4ISaW5zaWRlY2FyaWxpb24ub3JnggxjYXJpbGlvbi5jb22CEHd3dy5jYXJp
bGlvbi5jb22CD3d3dy5sa2V0ZXN0LmNvbYIOd3d3LmxrZWRldi5jb22CEG5lYnJ3
ZXNsZXlhbi5lZHWCDmludHJhbGlua3MuY29tghd3d3dzdGFnZS5pbnRyYWxpbmtz
LmNvbYIZd3d3Lm9mZmVycy5uZXV0cm9nZW5hLmNvbYIVb2ZmZXJzLm5ldXRyb2dl
bmEuY29tgg53d3cuenlydGVjLmNvbYIKenlydGVjLmNvbYIMbS56eXJ0ZWMuY29t
gg53d3cudmlzaW5lLmNvbYIKdmlzaW5lLmNvbYIQd3d3Lm15LWNvYWNoLmNvbYIM
bXktY29hY2guY29tghl3d3cuY2FsaWZvcm5pYWNsb3NldHMuY29tggx3d3cubmNn
LmNvb3CCCG5jZy5jb29wghJwYXJ0bmVycy5uY2dhLmNvb3CCCW5jZ2EuY29vcIIM
d3cubmNnYS5jb29wMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMuZGlnaWNl
cnQuY29tL3NoYTItaGEtc2VydmVyLWczLmNybDA0oDKgMIYuaHR0cDovL2NybDQu
ZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWczLmNybDBCBgNVHSAEOzA5MDcG
CWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5j
b20vQ1BTMIGDBggrBgEFBQcBAQR3MHUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw
LmRpZ2ljZXJ0LmNvbTBNBggrBgEFBQcwAoZBaHR0cDovL2NhY2VydHMuZGlnaWNl
cnQuY29tL0RpZ2lDZXJ0U0hBMkhpZ2hBc3N1cmFuY2VTZXJ2ZXJDQS5jcnQwDAYD
VR0TAQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAQEAmL05vAW0gjEokYny6KmauPlg
7WYWgZFKCNsl7T4hfncHjYnwJHRmCzgfzeW8YlcMjmYiOOQirsxkSwUMjLjxyR+t
E8slG4O/BGW7fZx4ciopfM/bPOexq8uhcx2TvIaMYmTxDzRsT4ODV2loWyFAocaR
TziDOnXCcGC/rKAVGuMGhbqweJfl2zxXhoh8sV6PwkDXeFC270MTspFzvj1v0WqG
k5ojG16IYMDh1vhhVZZna4+KgDRg2z3+7uziZLGwcp1yTaE1DBZnk/j3PzZjdNtv
jx37kE4LBQmI7hSeSLFVMXwYcfoA/USijS3cQkGhTdetFkC7AgJ4Btrbjzu4hA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwo/Dmzoa32UNolohGeVO
P3AVGliuQxOVmqnz/GllWvbPvuxoNaYkxOxDVggYc8oa7tpljX8jHBHbCUXnqoYZ
wdgWvnFar4YU+HS9AwGehvq6Dps6r16X7fU6BjSglHIZXTqAPPRW3/hnzHfDRhhg
u6WTRrkGYT597W/h5Tc+sHOnph+uQ/BVxJHcFylTmbCAFEwuanvi7I6gm3kcmC/Y
Jt1NQIeBi8RFG7A38zBJgwT5A246Am29+oXoMcXMv+OG4XM39cUPgflYT6AKgJaY
CzqdpNNqfzstd0FOKMyXaeCbUAK3lbK3+m4QF5DGxI+nK0Q2MIacjZz7KNTxC6O9
/9/bkJGu9808LqUJmn2ZR6+gPIla1mrgDYgWJkVh56x6dj/OLAsjM5l2m3yjGr1N
Dt9mn3sCKW56drSA/6g5KP/+VEzKmvqw1EmILDp/5DEFZk+9voLBrmHL4Tbqtu/U
BDHykrK7rMRE5+1eMz0bqV6UJyEm33IFMUQC1ua6gq6PRDsYev8h3XBxjOfJ106l
Kt8ySaYq/0yP5fPI8JK72YYwu6NcOC2V5er8nuzMF/g4GORs/7iEXnWRwtwWJhb1
Alv5lIZSGZJfhznxVdZFHZgWAF1SToPO6QARNrfdd/DEYfkDa/aZ10gVAr0pcMU9
yKG6Ix0LRHMKYg1PLVi+s20CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3273100671738944361166000827201582530
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Burlington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acquia Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acquia Hosting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acquia-sites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 793741989453921577137981195430090410740164696260924385358058574856072487236598580713365886541062181880762248451248741665024425428628646959062741439430773671064066762075127577938089522953063548074856671704360674057158373171196980668742824034650341151851563923672268518625292957029467616256123775424568094293092913976524838880170129418931248247093044454118018230110534531906957573381232418023756449168658986105241473657282226889302903013721980726142226917278060322384194404757390178538081748090252416236752618579075540816325686258984078286748377822561862046133486937816321640100388888952333865357852633138459317392001748452499505474273033603063212884116555209396132210154925319751183911877017653168834355386652178574870740836185827289097542785749729573296093451806221994692929277305019332994575972991660110078955331683744577060076280149221358774723628922823973269070913338688852442711374284537871452401348502800202417480087222964545418634913878846411780904049364836928252979453335581855627351739324735845769844004247223543641342549567902700412348116354070489709154054400109110916533916840016172115618021204486571941860496686161475812142258129298585746470851914707456500234060242986800573727604477646521866027241285699876955712135279469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8e9792dd9412a72fbfcf6b481da12a5d5996be0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2555 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaspan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sloanconsortium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chicagodrupalcamp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historytoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starkist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalccsinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalccsinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.vancouversun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.ottawacitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosicrucianegyptianmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosicrucianegyptianmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.calgaryherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.edmontonjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.leaderpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.montrealgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.theprovince.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.thestarphoenix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.timescolonist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.windsorstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trainlikeanastronaut.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.wwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2-test.wwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.pega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanduskyregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norwalkreflector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rifftrax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idonowidont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.einstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wales.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandhaventribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.epocratesehr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ise.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.precise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daily.newlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.audubon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseandhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '911memorial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daily.newlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ussecstg.prod.acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.rcmusic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.911memorial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selfgrowth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performance.rcmusic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americorpsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.power-one.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcmstg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynexusconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roost.audubon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solaris.nokiasiemensnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsbcommons.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novusbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooperhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onegsb.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovelacehealthplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.dexcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dexcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onegsb-stage.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devonbrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bell.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extension.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfx.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novusstg.prod.acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.novusbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygsb-stage.gsb.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygsb-prod.gsb.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cramersportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newgov.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summer.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.rita.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifcj.prod.acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theblessedlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preparecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.preparecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpdev.hunterindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdn-stg.pega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff.aljazeera.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycurebate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycurebate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.dexcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.carilionclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.carilionclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timex.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timex.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unavidadebendicion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radash.acquia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carilionclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carilionclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidecarilion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carilion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carilion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lketest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lkedev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intralinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwstage.intralinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offers.neutrogena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.neutrogena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zyrtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zyrtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.zyrtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-coach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-coach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.californiaclosets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncg.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncg.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.ncga.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncga.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.ncga.coop'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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