boxoffice.mcny.org

Issued by R3

About this certificate

This digital certificate with serial number 04:59:34:24:73:9c:cb:67:3c:91:07:4d:26:83:f0:83:e2:c3 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=boxoffice.mcny.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:59:34:24:73:9c:cb:67:3c:91:07:4d:26:83:f0:83:e2:c3
Serial Number (int): 378803583506371880748459344892789516395203
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 68:93:cb:46:ec:f8:16:51:61:d9:97:9f:ff:49:8a:dc:7f:6c:d6:9c
Fingerprint (sha256): 47:ec:02:08:67:9f:10:3d:80:94:f8:f3:5b:74:fb:12:72:b9:2b:81:f8:95:e2:d4:2f:d9:69:f2:4a:6b:bc:60

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate boxoffice.mcny.org

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for boxoffice.mcny.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

boxoffice.mcny.org
boztchividjian.religionnews.com
brainweek.dana.org
brianpellot.religionnews.com
bridge.ucsb.edu
britainelects.newstatesman.com
broadway.playhousesquare.org
business.ss.pacific.edu
buyersguide.aaps.org
cal.test.flwright.org
caldesignlab.berkeley.edu
calendar.sdzsafaripark.org
california.catholicreview.org
caminosseguros.iadb.org
campaign.ucsc.edu
campusportal.arizona.edu
cardinalapartments.stanford.edu
careers.whittier.edu
carpepm.almonds.com
cci520-new.courtinnovation.org
cdi.uga.edu
cdn-origin.commonsensemedia.org
cdn-test.battlefields.org
cen-stage.hosting.cornell.edu
census.arizona.edu
cetys.udesa.edu.ar
charon.sreb.org
chat-rl.web.arizona.edu
chem674.multidevcom.uaf.edu
cissl.comminfo.rutgers.edu
citeak.multidevcom.uaf.edu
civ.ctd.northwestern.edu
clc.shawnee.edu
cleanmedia.americamagazine.org
client.pfannenbergusa.com
clinicalpolicy.hsj.co.uk
cloudapp-eu.appcelerator.com
cloudapp-whale-sim.appcelerator.com
cloudapp.appcelerator.com
cloudapp.tui.appcelerator.com
club.kjzz.org
cmmb-portal.cmmb.org
cms.legacy.com
cn.oceana.org
coins.rutgers.edu
covid.usmle.org
cqn-erc.arizona.edu
crg.sandiegozoo.org
crmtest.eastdunbarton.gov.uk
cs.cs.berkeley.edu
csc.arizona.edu
d7.cmc.edu
d7store.juilliard.edu
dc.neilkelly.com
dea.action.drugpolicy.org
debate2016.wustl.edu
demeter.bavc.org
demo.govdelivery.com
dev-camdenbase.libraries.rutgers.edu
dev-cancerforum.hsj.co.uk
dev-covid19.chop.edu
dev-integratedcare.hsj.co.uk
dev-lp-jhubsph.edu.help
dev-mentalhealth.hsj.co.uk
dev-provider.hsj.co.uk
dev-web-degacc.edu.help
dev-web-jhucareycoop.edu.help
dev.business-services.upenn.edu
dev.cee.cornell.edu
dev.champions-speakers.co.uk
dev.courtinnovation.org
dev.cpra.cornell.edu
dev.ctd.northwestern.edu
dev.ece.cornell.edu
dev.efc.ny.gov
dev.engineering.cornell.edu
dev.farmjournalagtech.com
dev.hcmorg-hierarchy.isc.upenn.edu
dev.health.universityofcalifornia.edu
dev.law.georgetown.edu
dev.mae.cornell.edu
dev.mcny.org
dev.mse.cornell.edu
dev.nebrwesleyan.edu
dev.netimpact.org
dev.onlineeducation.psu.edu

Other certificates including the domain name mcny.org

(limited to 100 certificates)
carpepm.almonds.com
it.uahs.arizona.edu
calendar.sdzsafaripark.org
3fadmin.govdelivery.com
cdn-test.battlefields.org
chns120.courseresource.yale.edu
hub.meed.com
161511-web1.vilcek.org
good.gsm.cornell.edu
liberalarts.ss.pacific.edu
a.ns.christiancentury.org
5649521866440704-fe3.pantheonsite.io
host2.openminds.com
tls.automattic.com
tls.automattic.com
a.ns.christiancentury.org
labellelab.asu.edu
5648269346603008-fe1.pantheonsite.io
legacy.hq.philabundance.org
zh-cn.mcny.org
inside.gc.cuny.edu
shop.mcny.org
mcnymail.mcny.org
abong.ufcespanol.com
shop.mcny.org
banking-business-review.com
thegreatestgrid.mcny.org
161511-web1.vilcek.org
5648269346603008-fe1.pantheonsite.io
2023.rocktape.com
161511-web1.vilcek.org
5648269346603008-fe1.pantheonsite.io
scilsresx.rutgers.edu
161511-web1.vilcek.org
international.dev.oceana.org
staging.freedomworks.org
161511-web1.vilcek.org
junk.dana.org
tls.automattic.com
buyersguide.aaps.org
collections.mcny.org
afscme57.org
ucomm-sites-dev.stanford.edu
cdi.uga.edu
5649521866440704-fe3.pantheonsite.io
chns168.courseresource.yale.edu
161511-web1.vilcek.org
caldesignlab.berkeley.edu
alldata.com
banking-business-review.com
shop.mcny.org
careers.whittier.edu
cloudapp-eu.appcelerator.com
chns130.courseresource.yale.edu
stage.onlineeducation.psu.edu
alldata.com
5649521866440704-fe3.pantheonsite.io
intranet.olivecrest.org
live-legacy-cms.pantheonsite.io
5648269346603008-fe1.pantheonsite.io
banking-business-review.com
161511-web1.vilcek.org
laborlabsandbox.aflcio.org
tls.automattic.com
shop.mcny.org
chns150.courseresource.yale.edu
alldata.com
abong.ufcespanol.com
collections.mcny.org
stanfordsummersession.stanford.edu
internal.gcir.org
cci520-new.courtinnovation.org
cci520-new.courtinnovation.org
junk.dana.org
alldata.com
campaign.ucsc.edu
shop.mcny.org
chns130.courseresource.yale.edu
caldesignlab.berkeley.edu
161511-web1.vilcek.org
5648269346603008-fe1.pantheonsite.io
cetys.udesa.edu.ar
census.arizona.edu
banking-business-review.com
chns168.courseresource.yale.edu
international.research.ucsb.edu
thepointalehouse.com
mcny.org
cetys.udesa.edu.ar
tls.automattic.com
alldata.com
international.research.ucsb.edu
alldata.com
161511-web1.vilcek.org
staging.freedomworks.org
tls.automattic.com
2021convention.ncte.org
shop.mcny.org
161511-web1.vilcek.org
161511-web1.vilcek.org

Certificate

The complete raw certificate details for boxoffice.mcny.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378803583506371880748459344892789516395203
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-26 11:45:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 11:45:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'boxoffice.mcny.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boztchividjian.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainweek.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brianpellot.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'britainelects.newstatesman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadway.playhousesquare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyersguide.aaps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cal.test.flwright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caldesignlab.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calendar.sdzsafaripark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'california.catholicreview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caminosseguros.iadb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusportal.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalapartments.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.whittier.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carpepm.almonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cci520-new.courtinnovation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdi.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-origin.commonsensemedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-test.battlefields.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cen-stage.hosting.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'census.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetys.udesa.edu.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charon.sreb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat-rl.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chem674.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cissl.comminfo.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citeak.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civ.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clc.shawnee.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanmedia.americamagazine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.pfannenbergusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicalpolicy.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudapp-eu.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudapp-whale-sim.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudapp.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudapp.tui.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'club.kjzz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmmb-portal.cmmb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.legacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coins.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid.usmle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cqn-erc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crg.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmtest.eastdunbarton.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.cs.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd7.cmc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd7store.juilliard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.neilkelly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dea.action.drugpolicy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debate2016.wustl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demeter.bavc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-camdenbase.libraries.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-cancerforum.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-covid19.chop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-integratedcare.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-lp-jhubsph.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-mentalhealth.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-provider.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-web-degacc.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-web-jhucareycoop.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.business-services.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cee.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.champions-speakers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.courtinnovation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cpra.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ece.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.efc.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.engineering.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.farmjournalagtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.hcmorg-hierarchy.isc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.health.universityofcalifornia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.law.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.netimpact.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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