bejih.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f7:06:ee:7d:dc:c8:aa:c7:bf:f9:19:5b:1b:5c:a4:27:d6 was issued on by Let's Encrypt.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bejih.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f7:06:ee:7d:dc:c8:aa:c7:bf:f9:19:5b:1b:5c:a4:27:d6
Serial Number (int): 432508102043933327518404907598057029511126
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9a:fd:9c:5c:25:27:f7:3d:a7:63:fa:00:6a:0c:82:e1:98:41:d4:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): da:f1:4b:4e:43:2f:85:ee:05:7b:36:a6:5f:f3:45:5b:0a:cf:2f:ef
Fingerprint (sha256): 42:67:e7:5a:12:f6:f2:68:f6:5c:87:68:80:a0:6e:eb:79:35:d7:6d:c9:52:84:4e:34:b0:bb:9a:f0:cd:b5:4b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bejih.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bejih.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aasdsloth.gsm.cornell.edu
accreditation-dev.gatewaycc.edu
activityreport.msf.org
apidevdocs.trinet.com
arica.gbci.org
asterialab.gbci.org
barber.elitelearning.com
bchsi.ucsf.edu
bejih.com
blog.exabeam.com
c10.nrostatic.com
cactqa.rutgers.edu
campaign.umd.edu
cams.elitelearning.com
careers.wearedream.org
ci.boulder.co.us
cits.uwex.uwc.edu
climdyn.usc.edu
communitytestsite4.uaf.edu
communitytestsite5.uaf.edu
coronavirus.dev.purdue.edu
coronavirus.purdue.edu
coronavirus.vi.gov
cssrc.us
dev-national-review.pantheon.io
dev-uwbwww.site1.uwb.edu
dornsife-audaciousgoals.usc.edu
dp-homepage.usc.edu
drupal.infusionsoft.com
ectvf.rice.edu
enrollment.honors.uga.edu
entrepreneurship.umd.edu
events.parchment.com
gameon.johnsoncontrols.com
geodynamics.usc.edu
go.tricentis.com
harvardheroes.harvard.edu
healthtalks.baptisthealth.com
idea.ipi-singapore.org
interuss.lfprojects3.linuxfoundation.org
joukowsky.brown.edu
k12.presidio.edu
keste.nationalchickencouncil.org
ketse.nationalchickencouncil.org
ktes.nationalchickencouncil.org
learn.healthgrades.com
m.beready2retire.com
mbet.ask.gbci.org
mc-staging-library.web.viu.ca
newhirebenefits.nortonlifelock.com
nolimitcity.gsm.cornell.edu
nrostatic.com
oceansciences.usc.edu
one.toronto.edu
origin-dev-developer.apmterminals.com
panth.ketogummy.org
pantheon03.slac.stanford.edu
president-search-staging.sfsu.edu
producer-resource.myhippo.io
product.gbci.org
protect.dev.purdue.edu
protect.test.purdue.edu
psychology.elitelearning.com
rd.lls.edu
redesign-argentina.burtsbees.com
redesign-mexico.burtsbees.com
scearthquakes.dev.cofc.edu
search.gsm.cornell.edu
stage.nationalparks.org
summitbrewing.com
test-blog.nobelbiocare.com
test-uwbwww.site1.uwb.edu
tornado.sfsu.edu
www-ccd.usc.edu
www-dev.gccaz.edu
www.bienpartir.nestle.ca
www.harvardheroes.harvard.edu
ying77.krtv.com
zbane.gsm.cornell.edu

Other certificates including the domain name bejih.com

(limited to 100 certificates)
bejih.com
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
aasdsloth.gsm.cornell.edu
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com

Certificate

The complete raw certificate details for bejih.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSnemv0wZzcXAgMkBQX
ztwjNHFrHpIs5axrzzrdlw7T+GZAQLPiUvSZmF3ScRQ1Ni77M7wvvj8WKgEm6kmk
IGsqEr1NwVO/9M+bfL4ePy1ywV87Wx7ZOVVK4JWJMqctOtWZynJz3jX67Nda0+9B
++4/N4TAaLpUnxu83mMaTL+l/8yYin0iItxxZ3YRMvL8oMO9BWqFighCSszfIpRu
fGHjpEeodJZe7aLi7DcePvwyXZWi/al1YQeCdFkrpkcgk8myhP/APzQjk3bdKAlw
KQDdvQR4Y3b+bMJVibDWVrVqjLz+ybpaAJiOjKOmp9NDC6LZPJujVsE+mvYR8y2Z
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432508102043933327518404907598057029511126
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 19:08:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-11 19:08:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bejih.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295278889261962340330570593076765092564594026629510040566849443941721212705222905469227342749655760761925628146467776896918161669177237506061638055976839317974540229085566909601290432792766688540743857041618507082302908209321494362376641574366690514136936988276436757394515726000349835912320682069511736058985263380188984941851626522348036976567257123937402752130277851931257557691396509910741392947845349707974538616547869499133806197294376341097227039876415788275764051935080580783290065738507278734728703160147978353048962982659390140744073959855669537306275821116832669307766091573181749448001568724078979553621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9afd9c5c2527f73da763fa006a0c82e19841d49a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1923 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aasdsloth.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accreditation-dev.gatewaycc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activityreport.msf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidevdocs.trinet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arica.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asterialab.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barber.elitelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bchsi.ucsf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bejih.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.exabeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c10.nrostatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cactqa.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cams.elitelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.wearedream.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.boulder.co.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cits.uwex.uwc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climdyn.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communitytestsite4.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communitytestsite5.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronavirus.dev.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronavirus.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronavirus.vi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cssrc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-national-review.pantheon.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-uwbwww.site1.uwb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dornsife-audaciousgoals.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp-homepage.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drupal.infusionsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ectvf.rice.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrollment.honors.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entrepreneurship.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.parchment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameon.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geodynamics.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.tricentis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvardheroes.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthtalks.baptisthealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idea.ipi-singapore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interuss.lfprojects3.linuxfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joukowsky.brown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k12.presidio.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keste.nationalchickencouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketse.nationalchickencouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ktes.nationalchickencouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.healthgrades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beready2retire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbet.ask.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mc-staging-library.web.viu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhirebenefits.nortonlifelock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nolimitcity.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrostatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceansciences.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.toronto.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-dev-developer.apmterminals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panth.ketogummy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantheon03.slac.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'president-search-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'producer-resource.myhippo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'product.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protect.dev.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protect.test.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psychology.elitelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.lls.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redesign-argentina.burtsbees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redesign-mexico.burtsbees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scearthquakes.dev.cofc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nationalparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summitbrewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-blog.nobelbiocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-uwbwww.site1.uwb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tornado.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ccd.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.gccaz.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bienpartir.nestle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harvardheroes.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ying77.krtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zbane.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bca4caba90000040300473045022033db40652025d4149844d5498f86065046c9bef96299386ea9fbe353d1401a25022100bae143583c76383c293cbd733724853f1d660655ee3b8fa52c9404587c45377f007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bca4cabb6000004030046304402205e656181dfc8733ed4e699a8cc13097d9aadfcbb56503871e288784ee05f69a602200729393a38b25344df21eed887ef6de78d18288791c523207c15c4c998c21528
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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