web.commerce.virginia.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:7d:03:78:79:3d:dc:3d:80:03:5a:6a:e1:62:58:85:54:29 was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=web.commerce.virginia.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7d:03:78:79:3d:dc:3d:80:03:5a:6a:e1:62:58:85:54:29
Serial Number (int): 303876766879081067806110363122791224792105
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 63:66:4a:9a:39:8a:3d:8d:37:27:22:19:63:c4:12:fc:37:a7:6b:a7
Fingerprint (sha256): 47:60:0b:30:2f:7e:36:30:f1:00:ed:40:3b:c7:84:60:3f:7a:9f:d5:ad:40:6b:87:6e:0b:0e:b0:f3:80:1a:c5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate web.commerce.virginia.edu

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web.commerce.virginia.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web.commerce.virginia.edu
web.stjohns.edu.help
webdev.colorado.edu
website.wells.edu
webtest.tsu.edu
winter.arizona.edu
wireless.unlv.edu
wissc.arizona.edu
wp.americancouncils.org
wp.mwcc.edu
ww.thetrustees.org
www-chem.umd.edu
www.adobe.arizona.edu
www.advising.arizona.edu
www.archydro.crwr.utexas.edu
www.asla.ced.berkeley.edu
www.azcc.arizona.edu
www.azspo.az.gov
www.beta-engineering.princeton.edu
www.blackbearcoffee.com
www.blogs.earthjustice.org
www.cbs.asu.edu
www.cie.ucdavis.edu
www.crwr.utexas.edu
www.cybersecurity.umass.edu
www.datahero.com
www.design-engineering.princeton.edu
www.diplomacy.state.gov
www.dsdm.org
www.earlymodernenglishdrama.folger.edu
www.eci.ucsb.edu
www.ee.udel.edu
www.ein.az.gov
www.esc.rutgers.edu
www.eventsinfo.presidio.edu
www.extension.ucdavis.edu
www.facultyprograms.arizona.edu
www.financialaid.arizona.edu
www.gim.utoronto.ca
www.giving.dartmouth.edu
www.grrc.az.gov
www.gs.utexas.edu
www.hcii.cs.cmu.edu
www.ihe.uga.edu
www.inas2.uga.edu
www.international.arizona.edu
www.internationaladmissions.arizona.edu
www.issr.asu.edu
www.jhpiego.jhu.edu
www.lgcr.com
www.lhs.berkeley.edu
www.libertytreefoundation.org
www.marketing.arizona.edu
www.materialgirlcollection.com
www.molecularbiosci.utexas.edu
www.museconnect.arizona.edu
www.nartc.fcm.arizona.edu
www.newpiper.com
www.odee-pgmo.osu.edu
www.ol.rutgers.edu
www.online.foodsafety.msu.edu
www.onlinecso.dshs.wa.gov
www.onlineeducation.psu.edu
www.ordbc.arizona.edu
www.projectrequest.axway.com
www.projectshare.sfsu.edu
www.randybryceforcongress.com
www.readiness.osu.edu
www.resx.usc.edu
www.sisterstory.org
www.spain.uga.edu
www.sph.berkeley.edu
www.ss.pacific.edu
www.stopbreathethink.com
www.strength.org
www.studentmedia.arizona.edu
www.studyabroad.arizona.edu
www.summer-winter.arizona.edu
www.swcsc.arizona.edu
www.universityextension.ucdavis.edu
www.vpr.arizona.edu
www1.ccny.cuny.edu
www2.ccny.cuny.edu
www2.doctorswithoutborders.org
www2.familycenter.upenn.edu
www2.finance.upenn.edu
www2.naco.org
www2.president.usc.edu
www2.provost.upenn.edu
www2.stkate.edu
x17my.ctd.northwestern.edu
yqss.kjzz.org

Other certificates including the domain name virginia.edu

(limited to 100 certificates)
5654645158445056-fe4.pantheonsite.io
5754903989321728-fe2.pantheonsite.io
gracula.psyc.virginia.edu
ei-mon2.its.virginia.edu
www.berg.evsc.virginia.edu
5654645158445056-fe4.pantheonsite.io
blog.radiology.virginia.edu
5645914630782976-fe1.pantheonsite.io
andvari.org
blogs.darden.virginia.edu
5641826627223552-fe3.pantheonsite.io
*.jiveon.com
clearpass.hscs.virginia.edu
schedule.hscs.virginia.edu
cluster3.technolutions.net
wtdc11.wintest.virginia.edu
mygroups.virginia.edu
cluster.technolutions.net
tammlab.medicine.virginia.edu
*.mail.virginia.edu
video.comm.virginia.edu
vanity7.jiveon.com
cluster3.technolutions.net
stacey-aruba-7240-1.hscs.virginia.edu
uvaclubs.virginia.edu
atmos.evsc.virginia.edu
csc.virginia.edu
jagienka.med.virginia.edu
religionlab.virginia.edu
calendar.virginia.edu
realestate.virginia.edu
satellite01.its.virginia.edu
blogs.darden.virginia.edu
mdm.healthsystem.virginia.edu
evscta.evsc.virginia.edu
climate.evsc.virginia.edu
falmouth.lib.virginia.edu
helpdesk.evsc.virginia.edu
uconnectlabs.com
hstsbitableau1.hscs.virginia.edu
eso.evsc.virginia.edu
banking-business-review.com
tableau.admin.virginia.edu
staffsenate.virginia.edu
securemail.healthsystem.virginia.edu
www.uva2021.virginia.edu
apply.darden.virginia.edu
HSTSXCONT2.HSCS.VIRGINIA.EDU
advancement.virginia.edu
hsts3parmgt.hscs.virginia.edu
hstsmdaudithosp.hscs.virginia.edu
uconnectlabs.com
proteindiffraction.org
network-setup.itc.virginia.edu
5645914630782976-fe1.pantheonsite.io
cluster3.technolutions.net
learn.med.virginia.edu
vanity22.jiveon.com
ascs10.clas.virginia.edu
tams.nursing.virginia.edu
HSCSEBLOB.HSCS.VIRGINIA.EDU
5754903989321728-fe2.pantheonsite.io
devhub.virginia.edu
guides.lib.virginia.edu
5754903989321728-fe2.pantheonsite.io
erode.evsc.virginia.edu
findtrees.blandy.virginia.edu
apply.darden.virginia.edu
apply.undergradadmission.virginia.edu
*.cs.virginia.edu
wsx.lab.voice.virginia.edu
208.lsnc.net
falmouth.internal.lib.virginia.edu
hstsepiccaret.hscs.virginia.edu
hstsscrubip1.hscs.virginia.edu
5641826627223552-fe3.pantheonsite.io
www.arch.virginia.edu
acs.evsc.virginia.edu
ships.internal.lib.virginia.edu
xsp-cs.lab.voice.virginia.edu
*.jiveon.com
www.apps.studyabroad.virginia.edu
at.virginia.edu
hydrology.evsc.virginia.edu
gembaadmittedqc2.darden.virginia.edu
helpdesk.evsc.virginia.edu
vmssqlrp.eservices.virginia.edu
equityatlas.lib.virginia.edu
bioreproducibility.org
libanswers.law.virginia.edu
learningtech.virginia.edu
madcap.virginia.edu
epiccarelink.healthsystem.virginia.edu
apply.darden.virginia.edu
vdi-vcenter-s.eservices.virginia.edu
gracula.psyc.virginia.edu
cluster.technolutions.net
gwpapers.virginia.edu
panopto.eservices.virginia.edu
upenn-it.asc.upenn.edu

Certificate

The complete raw certificate details for web.commerce.virginia.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303876766879081067806110363122791224792105
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-13 19:41:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-11 19:41:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web.commerce.virginia.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2203 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.commerce.virginia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.stjohns.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdev.colorado.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'website.wells.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtest.tsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winter.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wireless.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wissc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.mwcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.thetrustees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-chem.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adobe.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advising.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archydro.crwr.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asla.ced.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azcc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azspo.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beta-engineering.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackbearcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blogs.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbs.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cie.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crwr.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cybersecurity.umass.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datahero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.design-engineering.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diplomacy.state.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsdm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earlymodernenglishdrama.folger.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eci.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ee.udel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ein.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esc.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eventsinfo.presidio.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facultyprograms.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financialaid.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gim.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giving.dartmouth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grrc.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gs.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcii.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihe.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inas2.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.international.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internationaladmissions.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.issr.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhpiego.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lgcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lhs.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertytreefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketing.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.materialgirlcollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.molecularbiosci.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.museconnect.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newpiper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odee-pgmo.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ol.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.online.foodsafety.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinecso.dshs.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ordbc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectrequest.axway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectshare.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.randybryceforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readiness.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sisterstory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spain.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sph.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stopbreathethink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strength.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studentmedia.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studyabroad.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summer-winter.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swcsc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universityextension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vpr.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.familycenter.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.finance.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.naco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.president.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.provost.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.stkate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x17my.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yqss.kjzz.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000183d3147dee0000040300483046022100d0b9196bc00292f8bc2b28fad77e80204bd80dcf121d77833e27d7aab42319b4022100c0c31532923ebdad69b332ad2aa65b8a431df52f71be3a1627574c95976f8c5e007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000183d3147fdd00000403004730450221008514c8c01498d9047aca789b24cf010a8c2d24267b6c63b617bea47a5a95e0d702202c472818d589bd1a44d707ab74fdddfad25bb83fbffa8cc6bfdcf88e3cc5d9f6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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