acquia-sites.com

- Acquia Inc -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 05:7b:22:0e:4f:5d:f6:66:28:ae:9c:05:d8:dc:42:d0 was issued on by DigiCert Inc.

With 109 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Acquia Inc

Organization: Acquia Inc
Organization unit: Acquia Hosting
State / Province: Massachusetts
Locality: Burlington
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:7b:22:0e:4f:5d:f6:66:28:ae:9c:05:d8:dc:42:d0
Serial Number (int): 7285483228208071983087981216048890576
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e8:e9:79:2d:d9:41:2a:72:fb:fc:f6:b4:81:da:12:a5:d5:99:6b:e0
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): 88:3f:0e:c7:e9:54:57:a3:e0:c0:37:8e:97:0a:aa:5a:42:eb:0b:9d
Fingerprint (sha256): 4a:1d:94:f2:4b:5d:b0:e8:6e:fd:c5:39:9d:5f:da:78:35:ff:0b:c9:f9:46:9a:51:59:2f:0b:26:04:a2:af:58

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-g29.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-g29.crl

Check the revocation status for certificate acquia-sites.com

109

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acquia-sites.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acquia-sites.com
acquia.com
jaspan.com
sloanconsortium.org
www.chicagodrupalcamp.org
www.historytoday.com
www.starkist.com
globalccsinstitute.com
www.globalccsinstitute.com
insider.vancouversun.com
insider.ottawacitizen.com
rosicrucianegyptianmuseum.org
www.rosicrucianegyptianmuseum.org
insider.calgaryherald.com
insider.edmontonjournal.com
insider.leaderpost.com
insider.montrealgazette.com
insider.theprovince.com
insider.thestarphoenix.com
insider.timescolonist.com
insider.windsorstar.com
trainlikeanastronaut.org
www2.wwt.com
www2-test.wwt.com
www.pega.com
staging.pega.com
www.sanduskyregister.com
www.norwalkreflector.com
www.rifftrax.com
www.idonowidont.com
www.einstruction.com
www.wales.ac.uk
www.grandhaventribune.com
support.epocratesehr.com
www.ise.gov
my.precise.com
www.daily.newlook.com
www.audubon.org
houseandhome.com
911memorial.org
daily.newlook.com
ussecstg.prod.acquia-sites.com
auth.rcmusic.ca
www.911memorial.org
www.selfgrowth.com
performance.rcmusic.ca
www.americorpsconnect.org
www.power-one.com
rcmstg.com
www.nebrwesleyan.edu
dev.nebrwesleyan.edu
store.nebrwesleyan.edu
mynexusconnection.com
roost.audubon.org
solaris.nokiasiemensnetworks.com
gsbcommons.stanford.edu
www.novusbio.com
www.cooperhealth.org
onegsb.stanford.edu
www.littler.com
www.uarts.edu
uarts.edu
sites.sfsu.edu
www.lovelacehealthplan.com
store.dexcom.com
www.dexcom.com
onegsb-stage.stanford.edu
devonbrc.com
bell.babson.edu
www.extension.harvard.edu
www.stfx.ca
novusstg.prod.acquia-sites.com
www.cbrands.com
origin.novusbio.com
mygsb-stage.gsb.stanford.edu
mygsb-prod.gsb.stanford.edu
www.cramersportsmed.com
newgov.us
www.summer.harvard.edu
stage.rita.dot.gov
timex.com
www.timex.com
pega.com
ifcj.prod.acquia-sites.com
www.theblessedlife.com
preparecenter.org
stg.preparecenter.org
hpdev.hunterindustries.com
pdn-stg.pega.com
staff.aljazeera.com.tr
mycurebate.com
www.mycurebate.com
my.dexcom.com
dev.carilionclinic.org
staging.carilionclinic.org
timex.co.uk
timex.ca
www.unavidadebendicion.com
radash.acquia.com
carilionclinic.org
www.carilionclinic.org
insidecarilion.org
carilion.com
www.carilion.com
www.lketest.com
www.lkedev.com
nebrwesleyan.edu
intralinks.com
wwwstage.intralinks.com

Other certificates including the domain name acquia-sites.com

(limited to 100 certificates)
acquia-sites.com
acquia-sites.com
acquia-sites.com
datamedicaid.prod.acquia-sites.com
acquia-sites.com
staging.ensco.com
www-stage.anzacmemorial.nsw.gov.au
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
achievesdtcgjdnbrbp.devcloud.acquia-sites.com
mbrdev.prod.acquia-sites.com
www.stg.solocal.com
tplwebsitestg.prod.acquia-sites.com
raritanvalstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
batterseadev.prod.acquia-sites.com
aupairworld.prod.acquia-sites.com
www.dev.solocal.com
www.stg.solocal.com
premiereprep.com
acquia-sites.com
ee.dustindev.com
cloudapi.enterprise-g1.acquia-sites.com
batterseadev.prod.acquia-sites.com
stewardcommunity.prod.acquia-sites.com
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
planetpaymentprod.prod.acquia-sites.com
trocairestg.prod.acquia-sites.com
tsysitesdev.prod.acquia-sites.com
tplwebsitestg.prod.acquia-sites.com
acquia-sites.com
milgardstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
rrd8multidev.prod.acquia-sites.com
pnwdsstg.prod.acquia-sites.com
www.dev.solocal.com
acquia-sites.com
useastucc5.acquia.com
www.anzacmemorial.nsw.gov.au
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
newhousedev.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
firstnamesgrouptest.devcloud.acquia-sites.com
acquia-sites.com
jfkldev.prod.acquia-sites.com
acquia-sites.com
cloudapi.trex-prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
quickanddirtytipsdev.prod.acquia-sites.com
acquia-sites.com
stewardcommunity.prod.acquia-sites.com
acquia-sites.com
oitcomms.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
univadisstg.prod.acquia-sites.com
useastucc5.acquia.com
datacms.prod.acquia-sites.com
acquia-sites.com
tplwebsitedev.prod.acquia-sites.com
bmistg.prod.acquia-sites.com

Certificate

The complete raw certificate details for acquia-sites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7285483228208071983087981216048890576
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Burlington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acquia Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acquia Hosting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acquia-sites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 793741989453921577137981195430090410740164696260924385358058574856072487236598580713365886541062181880762248451248741665024425428628646959062741439430773671064066762075127577938089522953063548074856671704360674057158373171196980668742824034650341151851563923672268518625292957029467616256123775424568094293092913976524838880170129418931248247093044454118018230110534531906957573381232418023756449168658986105241473657282226889302903013721980726142226917278060322384194404757390178538081748090252416236752618579075540816325686258984078286748377822561862046133486937816321640100388888952333865357852633138459317392001748452499505474273033603063212884116555209396132210154925319751183911877017653168834355386652178574870740836185827289097542785749729573296093451806221994692929277305019332994575972991660110078955331683744577060076280149221358774723628922823973269070913338688852442711374284537871452401348502800202417480087222964545418634913878846411780904049364836928252979453335581855627351739324735845769844004247223543641342549567902700412348116354070489709154054400109110916533916840016172115618021204486571941860496686161475812142258129298585746470851914707456500234060242986800573727604477646521866027241285699876955712135279469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8e9792dd9412a72fbfcf6b481da12a5d5996be0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2307 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaspan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sloanconsortium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chicagodrupalcamp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historytoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starkist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalccsinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalccsinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.vancouversun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.ottawacitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosicrucianegyptianmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosicrucianegyptianmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.calgaryherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.edmontonjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.leaderpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.montrealgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.theprovince.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.thestarphoenix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.timescolonist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.windsorstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trainlikeanastronaut.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.wwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2-test.wwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.pega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanduskyregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norwalkreflector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rifftrax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idonowidont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.einstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wales.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandhaventribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.epocratesehr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ise.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.precise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daily.newlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.audubon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseandhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '911memorial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daily.newlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ussecstg.prod.acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.rcmusic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.911memorial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selfgrowth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performance.rcmusic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americorpsconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.power-one.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcmstg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynexusconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roost.audubon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solaris.nokiasiemensnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsbcommons.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novusbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cooperhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onegsb.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uarts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovelacehealthplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.dexcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dexcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onegsb-stage.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devonbrc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bell.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extension.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfx.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novusstg.prod.acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.novusbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygsb-stage.gsb.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygsb-prod.gsb.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cramersportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newgov.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summer.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.rita.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifcj.prod.acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theblessedlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preparecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.preparecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpdev.hunterindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdn-stg.pega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff.aljazeera.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycurebate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycurebate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.dexcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.carilionclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.carilionclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timex.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timex.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unavidadebendicion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radash.acquia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carilionclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carilionclinic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidecarilion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carilion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carilion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lketest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lkedev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intralinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwstage.intralinks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-g29.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-g29.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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