5727517264576512-fe4.pantheonsite.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fe:32:1e:4d:b3:dc:d9:e1:a2:b3:59:4d:39:3b:27:83:0a was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=5727517264576512-fe4.pantheonsite.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fe:32:1e:4d:b3:dc:d9:e1:a2:b3:59:4d:39:3b:27:83:0a
Serial Number (int): 347835197737889842173872141057129122857738
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:c9:0d:15:a8:e9:df:c9:b4:7b:80:78:15:b0:6c:9a:4a:f2:ed:fc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 11:e7:69:3e:b3:15:e5:62:60:69:79:31:3f:fa:46:58:36:dc:c6:36
Fingerprint (sha256): 49:42:93:71:73:77:ff:5d:39:3c:42:cd:d6:d8:80:ca:9a:7d:d5:a9:7b:83:78:f6:ff:e4:cf:37:49:39:38:80

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 5727517264576512-fe4.pantheonsite.io

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 5727517264576512-fe4.pantheonsite.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

5727517264576512-fe4.pantheonsite.io
aboriginal.viu.ca
academic.sfsu.edu
adm.viu.ca
art-staging.sfsu.edu
babyandme-ir.nestle.com
bridgingbarriers.utexas.edu
bryanths.fcps.edu
buildcoinfoundation.org
carrollwsd.com
cbda.engineering.asu.edu
cee.utexas.edu
cel.sfsu.edu
ces.asu.edu
chinamedicalboard.org
commons-staging.sfsu.edu
dogwoodes.fcps.edu
education.viu.ca
elsit-staging.sfsu.edu
fitness.asu.edu
gabon.unfpa.org
gambia.unfpa.org
gcc.unfpa.org
georgia.unfpa.org
ghana.unfpa.org
giving.viu.ca
haiti.unfpa.org
handsupforhaiti.org
historydev.rotary.org
holmesms.fcps.edu
honduras.unfpa.org
india.unfpa.org
indonesia.unfpa.org
iraq.unfpa.org
jordan.unfpa.org
kazakhstan.unfpa.org
kenya.unfpa.org
kluge.library.cornell.edu
kosovo.unfpa.org
kyrgyzstan.unfpa.org
lac.unfpa.org
lao.unfpa.org
law.asu.edu
ld4l.org
leonlevyfoundation.org
lesotho.unfpa.org
live.aep.cornell.edu
madagascar.unfpa.org
making-waves.org
malawi.unfpa.org
malaysia.unfpa.org
maldives.unfpa.org
mali.unfpa.org
mauritania.unfpa.org
mk.unfpa.org
moldova.unfpa.org
mongolia.unfpa.org
morocco.unfpa.org
mozambique.unfpa.org
myanmar.unfpa.org
ombuds.utexas.edu
outreach-staging.sfsu.edu
pbk-staging.sfsu.edu
pointmanofnewburgh.com
ppd-staging.sfsu.edu
procaredentalservicesco.com
public-pantheon.tableau.com
stat.cornell.edu
stewart-trust.org
sustain-staging.sfsu.edu
sustain.sfsu.edu
test.amgiosk.com
texasparents.org
timbertrading.com
trademarks.utexas.edu
ueap.sfsu.edu
ugs.sfsu.edu
upd-staging.sfsu.edu
ur.viu.ca
visualawareness.com
webaccessibility.asu.edu
www.buildcoinfoundation.org
www.cel.sfsu.edu
www.chinamedicalboard.org
www.handsupforhaiti.org
www.hartenergy.com
www.law.asu.edu
www.ld4l.org
www.leonlevy.org
www.ombuds.utexas.edu
www.oneclass.utexas.edu
www.pointmanofnewburgh.com
www.procaredentalservicesco.com
www.stat.cornell.edu
www.texasparents.org
www.timbertrading.com
www.trademarks.utexas.edu
www.visualawareness.com

Other certificates including the domain name 5727517264576512-fe4.pantheonsite.io

(limited to 100 certificates)
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io

Certificate

The complete raw certificate details for 5727517264576512-fe4.pantheonsite.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ8jI/2GMzpa/KiPWJd+
i0Hl8rFl/uhj/mNKUBVmMgtTDsv7bk5+AWbzS12q81Tupbco05eulZmC23D8UUv4
eEmszSr4bJscXkD4VgkckzTJZKrUv879NyUIr+x+8XhuLpVL4iDUOXVT4ft5LITv
08M7YmfiOZkMqnTZ9EOsGq0AmxGrgKJjrqHpkwHULaMhHqaEJDamoFTGBqpA609o
6D0djtkjT8ZdZzmiHDvFR3oFRKv2664NXcMAI0fxm/Xf1PHy5fSY8ufE2tmrEvFP
6T2JrbVS6PKFdPfR7QMZ/DiPBvRAH5qVQ57DmNlDCi49fIbDP/okh+nFx9HWK1in
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347835197737889842173872141057129122857738
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 15:00:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-09 15:00:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5727517264576512-fe4.pantheonsite.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23361550883736045252117561803693089703592509698645070918951383796590597008659886483560755272625671268483988209421061467474057620499861510275047191962656742782951637475731951215847874677403828206074367465816500356106235334930297266215451918720905469801690099467991082930429865448850947006543122893739657313377511420669609009789400682934226504918813417107834823244164478974966872859476115300128134587305408319228164253035694533279154609722518512656817529941434978752330906587491180818904626365904647718831036804772190001347747484840760074478159560188624450790820557300819544742635408223689361845510000876184567568443221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ac90d15a8e9dfc9b47b807815b06c9a4af2edfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2007 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5727517264576512-fe4.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboriginal.viu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academic.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adm.viu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'art-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babyandme-ir.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgingbarriers.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bryanths.fcps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildcoinfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollwsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbda.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cee.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cel.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinamedicalboard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commons-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogwoodes.fcps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education.viu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elsit-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitness.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gabon.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gambia.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcc.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgia.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghana.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.viu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haiti.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handsupforhaiti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historydev.rotary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holmesms.fcps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honduras.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'india.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indonesia.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iraq.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jordan.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kazakhstan.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenya.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kluge.library.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kosovo.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyrgyzstan.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lac.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lao.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ld4l.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leonlevyfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesotho.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madagascar.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'making-waves.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malawi.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malaysia.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maldives.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mali.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mauritania.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moldova.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mongolia.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morocco.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mozambique.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myanmar.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ombuds.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outreach-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbk-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointmanofnewburgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppd-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procaredentalservicesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public-pantheon.tableau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stat.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewart-trust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustain-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustain.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.amgiosk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasparents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timbertrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trademarks.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ueap.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugs.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upd-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ur.viu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visualawareness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webaccessibility.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buildcoinfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cel.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinamedicalboard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handsupforhaiti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hartenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.law.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ld4l.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leonlevy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ombuds.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oneclass.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pointmanofnewburgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.procaredentalservicesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stat.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texasparents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timbertrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trademarks.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visualawareness.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f902f245a000004030047304502201a817bf3d609b1ac0752b78ac7d33e0f261ab827826f8e3a54ed12c1b8e3e457022100eabe8571effc3015dc3619c41e5f369efb5540b7fdb5792b741cf8e911cf7c7e007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f902f24450000040300483046022100eec3127595c5dca57e8829419823839becd7af91b3caad4f90b537e4a2cc1f4c022100c4a40ce2499b2eb44381e21abaf2e08a5b71a8d68cd6682c73960b34c3d2fe18
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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