campaign.ucsc.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:8f:df:89:00:47:1a:fb:1a:c6:84:47:7a:d8:24:e7:3d:a1 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=campaign.ucsc.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8f:df:89:00:47:1a:fb:1a:c6:84:47:7a:d8:24:e7:3d:a1
Serial Number (int): 397406651390098392088393186341574809173409
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 49:5c:38:b5:ac:58:f0:0c:f1:c1:50:de:17:62:d8:84:f8:30:ce:b1
Fingerprint (sha256): 48:6d:d3:91:ba:cf:13:be:29:0a:e0:60:fb:21:b3:aa:19:41:84:65:3d:d9:72:2b:3f:7f:57:7a:27:04:dd:15

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate campaign.ucsc.edu

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for campaign.ucsc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campaign.ucsc.edu
cardinalapartments.stanford.edu
careers.whittier.edu
carpepm.almonds.com
cci520-new.courtinnovation.org
cdi.uga.edu
cdn-origin.commonsensemedia.org
cdn-test.battlefields.org
census.arizona.edu
cesd.arizona.edu
cetys.udesa.edu.ar
charon.sreb.org
chat-rl.web.arizona.edu
chem674.multidevcom.uaf.edu
citeak.multidevcom.uaf.edu
civ.ctd.northwestern.edu
clc.shawnee.edu
cleanmedia.americamagazine.org
client.pfannenbergusa.com
clinicalpolicy.hsj.co.uk
cloudapp-eu.appcelerator.com
cloudapp-whale-sim.appcelerator.com
cloudapp.appcelerator.com
cloudapp.tui.appcelerator.com
club.kjzz.org
cmmb-portal.cmmb.org
cms.legacy.com
cn.oceana.org
coins.rutgers.edu
covid.usmle.org
cqn-erc.arizona.edu
crmtest.eastdunbarton.gov.uk
cs.cs.berkeley.edu
csc.arizona.edu
d7.cmc.edu
d7store.juilliard.edu
daniela.patch.com
dc.neilkelly.com
demeter.bavc.org
demo.govdelivery.com
dev-camdenbase.libraries.rutgers.edu
dev-cancerforum.hsj.co.uk
dev-covid19.chop.edu
dev-integratedcare.hsj.co.uk
dev-lp-jhubsph.edu.help
dev-mentalhealth.hsj.co.uk
dev-provider.hsj.co.uk
dev-web-degacc.edu.help
dev-web-jhucareycoop.edu.help
dev.business-services.upenn.edu
dev.cee.cornell.edu
dev.champions-speakers.co.uk
dev.courtinnovation.org
dev.cpra.cornell.edu
dev.ctd.northwestern.edu
dev.ece.cornell.edu
dev.efc.ny.gov
dev.engineering.cornell.edu
dev.farmjournalagtech.com
dev.hcmorg-hierarchy.isc.upenn.edu
dev.mae.cornell.edu
dev.mcny.org
dev.mse.cornell.edu
dev.nebrwesleyan.edu
dev.onlineeducation.psu.edu
dev.shibtest7.isc.upenn.edu
dev1.engineering.ucsb.edu
dev1.si.umich.edu
devdr.azmex.arizona.edu
develop.madera.courts.ca.gov
dial.sralab.org
discoverydays.arizona.edu
dlpe.calc.gatech.edu
dmats.spcs.stanford.edu
dmats.stanford.edu
drupal.infusionsoft.com
ds.arizona.edu
ebot200.multidevcom.uaf.edu
ecalso.berkeley.edu
ecc.nacha.org
education.ss.pacific.edu
ees.ead.lbl.gov
ehs.sph.berkeley.edu
eis.dev.cms1.asa.uw.edu
engaginghumanities.ucsb.edu
engineering.ss.pacific.edu

Other certificates including the domain name ucsc.edu

(limited to 100 certificates)
farmandgardenwiki.ucsc.edu
5631986051842048-fe1.pantheonsite.io
it.uahs.arizona.edu
connect.ucsc.edu
wcms.ucsc.edu
cp-scanner.ucsc.edu
calendar.sdzsafaripark.org
monitor.soe.ucsc.edu
applygrad.ucsc.edu
cscenter.pbsci.ucsc.edu
5707090131681280-fe3.pantheonsite.io
746f6675.ucsc.edu
wordpress.ucsc.edu
sho-prod-web-2.ad.ucsc.edu
banking-business-review.com
undergrad.pbsci.ucsc.edu
hyperion.ucsc.edu
ecommons.ucsc.edu
iacuc.ucsc.edu
stage.cghub.ucsc.edu
dunkin.eeb.ucsc.edu
campusrec.ucsc.edu
5684453372329984-fe2.pantheonsite.io
5638159220080640-fe2.pantheonsite.io
banking-business-review.com
my.prd.ais.aws.ucsc.edu
gradadmissions.ucsc.edu
pleiades.ucsc.edu
scalefunder.net
ugr.ue.ucsc.edu
noc-dev-vise-1.ucsc.edu
ur-tst-nav.ucsc.edu
5754079087165440-fe4.pantheonsite.io
scalefundercert.net
ecommons.ucsc.edu
5631986051842048-fe1.pantheonsite.io
208.lsnc.net
drs.sandbox.dev.singlecell.gi.ucsc.edu
wildlife.ucsc.edu
5679052450955264-fe2.pantheonsite.io
win-sys-mgr-1.lt.ucsc.edu
5682747733442560-fe3.pantheonsite.io
wcms-prod-web-5.ucsc.edu
5156937704407040-fe1.pantheonsite.io
officeofresearchhelp.ucsc.edu
its-prod-www2-2.ucsc.edu
5638159220080640-fe2.pantheonsite.io
5682747733442560-fe3.pantheonsite.io
5156937704407040-fe1.pantheonsite.io
officeofresearchhelp.ucsc.edu
bsg-sandbox.ucsc.edu
drs.sandbox.dev.singlecell.gi.ucsc.edu
service.sandbox.dev.singlecell.gi.ucsc.edu
banking-business-review.com
urlogin.ucsc.edu
shs-prd-bkr1.au.ucsc.edu
genecats.gi.ucsc.edu
5156937704407040-fe1.pantheonsite.io
hyperion.ucsc.edu
5707090131681280-fe3.pantheonsite.io
5156937704407040-fe1.pantheonsite.io
campusrec.ucsc.edu
ad-prod-rdcb-1.ad.ucsc.edu
vi-prod-vpsc-1.au.ucsc.edu
5156937704407040-fe1.pantheonsite.io
gitlab.soe.ucsc.edu
gradlab.ucsc.edu
saturn.ucsc.edu
208.lsnc.net
pisa.tst.ais.aws.ucsc.edu
161511-web1.vilcek.org
*.courses.soe.ucsc.edu
libportal.ucsc.edu
5156937704407040-fe1.pantheonsite.io
scalefundercert.net
griffin.ucsc.edu
shs-prod-app-2.ad.ucsc.edu
hacking4oceans.ucsc.edu
pisa-dev.ucsc.edu
5638159220080640-fe2.pantheonsite.io
cf-prd-app-1.ucsc.edu
research-it.ucsc.edu
5717044213317632-fe3.pantheonsite.io
mmapl.ucsc.edu
*.ue.ucsc.edu
*.ucsc.edu
noc-prod-vise-2.ucsc.edu
hexcalc.gi.ucsc.edu
ppc-webdav.ucsc.edu
5679052450955264-fe2.pantheonsite.io
gradadmissions.ucsc.edu
sctv.ucsc.edu
ais-reports.rds.ucsc.edu
static.ucsc.edu
ccrec.ucsc.edu
gradadmissions.ucsc.edu
liberalarts.ss.pacific.edu
dunkin.eeb.ucsc.edu
scalefunder.net
scalefunder.net

Certificate

The complete raw certificate details for campaign.ucsc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397406651390098392088393186341574809173409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-09 10:17:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-07 10:17:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campaign.ucsc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2055 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalapartments.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.whittier.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carpepm.almonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cci520-new.courtinnovation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdi.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-origin.commonsensemedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-test.battlefields.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'census.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cesd.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetys.udesa.edu.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charon.sreb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat-rl.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chem674.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citeak.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civ.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clc.shawnee.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanmedia.americamagazine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.pfannenbergusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicalpolicy.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudapp-eu.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudapp-whale-sim.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudapp.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudapp.tui.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'club.kjzz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmmb-portal.cmmb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.legacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coins.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid.usmle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cqn-erc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmtest.eastdunbarton.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.cs.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd7.cmc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd7store.juilliard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daniela.patch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.neilkelly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demeter.bavc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-camdenbase.libraries.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-cancerforum.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-covid19.chop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-integratedcare.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-lp-jhubsph.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-mentalhealth.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-provider.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-web-degacc.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-web-jhucareycoop.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.business-services.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cee.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.champions-speakers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.courtinnovation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cpra.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ece.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.efc.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.engineering.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.farmjournalagtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.hcmorg-hierarchy.isc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.shibtest7.isc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.engineering.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.si.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devdr.azmex.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop.madera.courts.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dial.sralab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverydays.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlpe.calc.gatech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.spcs.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drupal.infusionsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebot200.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecalso.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecc.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ees.ead.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehs.sph.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eis.dev.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engaginghumanities.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engineering.ss.pacific.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001845c1bea950000040300483046022100814e61e44f6d5e7ae1a94f3bad4219e255960165f76cad2cabd3c5ec6e5fec2f022100d213c2b4284d54375f1372ae4e81da19ee46401b9fdcc189ed85f3aa7d3f5616007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001845c1bec86000004030047304502210094b6d2b2443b7cc73e7ca0361887240226095409ec98e0700ca1ab3aef1e3593022017c399a27e7f92fdefec407bbed4edeb696b6051761fe9ab831e3edce73c7e01
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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