208.lsnc.net

Issued by R3

About this certificate

This digital certificate with serial number 03:43:b5:4a:cd:dd:b3:1d:21:bc:b5:ee:bb:26:c7:1c:7d:f5 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=208.lsnc.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:b5:4a:cd:dd:b3:1d:21:bc:b5:ee:bb:26:c7:1c:7d:f5
Serial Number (int): 284376755051647044041328734090969323699701
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6c:34:21:35:73:e5:b1:d8:d4:84:e3:7c:0c:22:a8:f2:58:df:bd:3e
Fingerprint (sha256): 42:a2:d2:a9:c8:9e:da:1a:bc:e3:3c:3b:3d:66:d2:d2:31:84:8d:07:08:98:40:1c:6b:02:f0:2f:bc:30:46:be

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 208.lsnc.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 208.lsnc.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

208.lsnc.net
acadmintest.cuofco.org
act.mattek.com
adminsvcs.unlv.edu
advertise.tu.org
alaskamastergardener.multidevcom.uaf.edu
anniversaries.uahs.arizona.edu
appcamp.engineering.asu.edu
archydro.crwr.utexas.edu
asktico.lib.berkeley.edu
avnetinnovationlab.engineering.asu.edu
banking-business-review.com
biopoliticaltimes.org
bridge.ucsb.edu
broadway.playhousesquare.org
business.ss.pacific.edu
ca.govdelivery.com
campaign.ucsc.edu
chns122.courseresource.yale.edu
coins.rutgers.edu
cornthins.com
cultureoflife.org
datahero.com
dev.business-services.upenn.edu
dev.dhsri.yale.edu
dev.mse.cornell.edu
dev.wellness.yale.edu
dev.yllt.yale.edu
dev1.si.umich.edu
dmats.spcs.stanford.edu
eis.washington.edu
embi.commerce.virginia.edu
emetry.io
engineering.ss.pacific.edu
environment.research.yale.edu
expeditions.sandiegozoo.org
exploringthecomplexity.ucdavis.edu
faculty.gsm.ucdavis.edu
floridahospitalcancer.com
inas2.uga.edu
inside.gc.cuny.edu
itcatalyst.sfsu.edu
labellelab.asu.edu
lambda.usc.edu
likenoother.tsm.edu
live.cam.cornell.edu
live.engineering.cornell.edu
live.ucdavis.edu
makinghistory.gwu.edu
mediasandbox.cas.msu.edu
missioncritical.wharton.upenn.edu
mt.nokidhungry.org
nanophotonics.asu.edu
news.kettering.edu
online.asu.edu
ordbc.arizona.edu
pctc.washington.edu
pdg.alteryx.com
pentest.web.arizona.edu
projectshare.sfsu.edu
radsafe.berkeley.edu
resx.usc.edu
rex.ce.berkeley.edu
rmp.rutgers.edu
scilsresx.rutgers.edu
sites.laverne.edu
stage.nebrwesleyan.edu
stage.onlineeducation.psu.edu
stanfordsummersession.stanford.edu
tango.franklin.uga.edu
test-wp.nationalreview.com
test.cam.cornell.edu
test.cee.cornell.edu
test.finance.upenn.edu
test.mae.cornell.edu
test.mse.cornell.edu
thepointalehouse.com
tl.wvu.edu
townofdiscoverybay.ca.gov
tst.laffertylab.yale.edu
updates.cjei.cornell.edu
upenn-it.asc.upenn.edu
vpr.arizona.edu
webdev.colorado.edu
websiteservices.watech.wa.gov
wissc.arizona.edu
www-chem.umd.edu
www.acims.arizona.edu
www.archydro.crwr.utexas.edu
www.azcc.arizona.edu
www.azspo.az.gov
www.cie.ucdavis.edu
www.crwr.utexas.edu
www.datahero.com
www.devdirect.giving.utexas.edu
www.doem.washington.edu
www.ee.udel.edu
www.ein.az.gov
www.esc.rutgers.edu
www.extension.ucdavis.edu

Other certificates including the domain name lsnc.net

(limited to 100 certificates)
208.lsnc.net
208.lsnc.net
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
208.lsnc.net
208.lsnc.net
5657582312095744-fe3.pantheonsite.io
208.lsnc.net
sni70248.cloudflaressl.com
banking-business-review.com
208.lsnc.net
sni70248.cloudflaressl.com
208.lsnc.net
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com
5657582312095744-fe3.pantheonsite.io
208.lsnc.net
sni70248.cloudflaressl.com
208.lsnc.net
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
biopoliticaltimes.org
sni70248.cloudflaressl.com
208.lsnc.net
208.lsnc.net
sni70248.cloudflaressl.com
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
208.lsnc.net
5657582312095744-fe3.pantheonsite.io
lsnc.net
sni.cloudflaressl.com
sni70248.cloudflaressl.com
5657582312095744-fe3.pantheonsite.io
208.lsnc.net
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
biopoliticaltimes.org
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
208.lsnc.net
208.lsnc.net
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
208.lsnc.net
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
208.lsnc.net
sni70248.cloudflaressl.com
5657582312095744-fe3.pantheonsite.io
208.lsnc.net
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com
208.lsnc.net
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
208.lsnc.net
sni70248.cloudflaressl.com
sni.cloudflaressl.com
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
208.lsnc.net
208.lsnc.net
208.lsnc.net
208.lsnc.net
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
208.lsnc.net
208.lsnc.net
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com

Certificate

The complete raw certificate details for 208.lsnc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284376755051647044041328734090969323699701
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-04 21:26:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-02 21:26:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '208.lsnc.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2306 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '208.lsnc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acadmintest.cuofco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.mattek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminsvcs.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertise.tu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaskamastergardener.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anniversaries.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appcamp.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archydro.crwr.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asktico.lib.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avnetinnovationlab.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banking-business-review.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biopoliticaltimes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadway.playhousesquare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chns122.courseresource.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coins.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornthins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cultureoflife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datahero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.business-services.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dhsri.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wellness.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.yllt.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.si.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.spcs.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eis.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embi.commerce.virginia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emetry.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engineering.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'environment.research.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expeditions.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploringthecomplexity.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faculty.gsm.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floridahospitalcancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inas2.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.gc.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcatalyst.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labellelab.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambda.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'likenoother.tsm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.engineering.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediasandbox.cas.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missioncritical.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mt.nokidhungry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanophotonics.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.kettering.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordbc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pctc.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdg.alteryx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pentest.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectshare.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsafe.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rex.ce.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmp.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scilsresx.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.laverne.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanfordsummersession.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tango.franklin.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-wp.nationalreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cee.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.finance.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepointalehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tl.wvu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townofdiscoverybay.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.laffertylab.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.cjei.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upenn-it.asc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpr.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdev.colorado.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websiteservices.watech.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wissc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-chem.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acims.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archydro.crwr.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azcc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azspo.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cie.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crwr.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datahero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devdirect.giving.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doem.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ee.udel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ein.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esc.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extension.ucdavis.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000181cb52117e000004030046304402203c278e2dac089a1eab07a0c3b513d5337a8a85ade4d7b9146f6d72e952ea24cf02202fb74334fc63a2a5d9822b422787b97a6a834588a01ee47a55c6ebe3fee6851200760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000181cb5211ab0000040300473045022100948a862a14326b7e0bcc7a5c9d4acc9a7e5f5f683b3cb4674b16db5505dde5c80220589c25a1bc351f7fec97edc5caa4dbd67413383d56abb008d0e837dfa5a4c173
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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