secure.mdl.io

- Mindfireinc -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 32:41:eb:b1:78:ca:c2:ab:00:00:00:00:50:ec:13:10 was issued on by Entrust, Inc..

With 134 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Mindfireinc

Organization: Mindfireinc
State / Province: California
Locality: Irvine
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 32:41:eb:b1:78:ca:c2:ab:00:00:00:00:50:ec:13:10
Serial Number (int): 66803679512075504095996693593874764560
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 9a:13:14:db:99:98:0b:ca:72:c5:b4:d2:50:6e:65:b0:a8:f3:49:52
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 7a:25:8a:97:cc:07:d2:b9:40:55:fd:a7:f4:ed:5e:85:59:8d:04:ad
Fingerprint (sha256): 4b:40:21:9e:6c:7e:6d:ec:d3:8c:dc:29:4a:9f:cc:74:84:54:ca:90:08:e6:e8:92:be:78:4b:c0:94:1c:a3:a4

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate secure.mdl.io

134

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.mdl.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.mdl.io
letsgo.lasell.edu
www.albion-college.com
www.BHGLoan.com
be.tabor.edu
www.BHGcards.com
www.bhgloans.com
www.BHGProLoan.com
www.borrowelastic.com
www.bhgpowercard.com
defineURLIFE.peace.edu
discover.onetoone.group
elevateuploader.com
go.monmouthcollege.edu
go.samford.edu
www.igive2epic.com
studio.mdl.io
welcometothefamily-customerdirect.m.mdl.io
petcothinkadoptionfirst.m.mdl.io
studio.afw.mdl.io
studio.dashboard.mdl.io
studio.admin.mdl.io
studio.purl.mdl.io
microsite.container.mdl.io
members.championshipcommitment.com
www.mybhgcards.com
www.mycapitalnow.com
www.nominatestudentleaders.com
quote.onetoone.group
rxgames.leehealthfoundation.org
www.rxgames.org
www.smhf-givegratitude.org
tracking.mdl.io
www.supportecfs.org
www.supporthm.org
applymjur.stmarytx.edu
urpromises.thomas.edu
*.my-dv.com
your.lr.edu
www.BHGLending.com
www.grouplegalplanoffer.com
www.investdbq.com
rewards.kewadin.com
www.applyelastic.com
itspersonal.martinmethodist.edu
be.hendrix.edu
www.metpdpnetworkdev.com
www.bhgandbanks.com
www.metpdp.com
www.umadnessinmarch.com
www.lake-watch.com
getsxm.com
igive2epic.com
www.getsxm.com
monitor.mdl.io
werhome.oc.edu
www.mobltycarpetone.com
elephants.win2wild.com
hippos.win2wild.com
rhinos.win2wild.com
www.btpeds.org
www.givingmu.com
citidemo.sandyinc.com
www.myprobucksgift.com
www.welcometoharvey.com
*.secure.mdl.io
www.edwardsupdate.ca
apply.keystone.edu
promise.keystone.edu
getinfo.cps.gwu.edu
www.lvcscholarship.com
optin.onestarrewards.com
www.keepitfrosty.com
www.BHGPersonal.com
theedge.guilford.edu
belongat.bw.edu
visit.bw.edu
www.firespringpromo.com
mymccalling.com
TFCadventure.com
DiscoverLACollege.com
theBCdifference.com
faulknerlawschool.com
discoverShorter.com
BPCforMe.com
TransfertoMC.com
YourMCcalling.com
flavors.centrisfcu.org
bstrong.wtamu.edu
extraordinary.rmc.edu
www.backtohastings.com
motiontosucceed.com
www.wpc4cc.com
www.supportsacredheartgreenwich.org
www.supportsbp.org
give.dwight.edu
www.cornhuskerbankpowerchecking.com
www.metdhmo.com
experience.coker.edu
darden-rfp.sandyesademo.com
imustgo.mhu.edu
www.getrisecredit.com
www.myemprisebank.com
go.belmontabbeycollege.edu
www.helpyourretirement.com
www.coffeewithtravis.com
www.fdlcrewards.com
www.arcfulfill.com
*.getkasasacash.com
*.getkasasacashback.com
www.yourelastic.com
www.c1mm.com
louisianacollegedigital.com
shorterudigital.com
onelimestone.com
www.rittersoffer.com
www.explorehpu.com
www.explorebrenau.com
www.explorewwc.com
www.explorewestminster.com
www.yourloyola.com
www.gohusson.com
www.explorelesley.com
www.explorelvc.com
www.discoveraic.com
www.youbelongatwells.com
www.gonewmanu.com
www.explorenewcollege.com
www.thinkmeredith.com
connect.linfield.edu
www.championshipcommitment.com
*.getkasasaloans.com
lifecall.truett.edu
opportunity.shawu.edu

Other certificates including the domain name mdl.io

(limited to 100 certificates)

Certificate

The complete raw certificate details for secure.mdl.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X9cpajqFgEdCZ+iMC5T
aEIIuxqEa/HN0ofFmq/lqtp33ja+FvPxWJMQom+knM8V7SCuVvZmB4SsBS0WuM3/
tvS10KhAU2Ffzp1YWoxiFyRXgbKcqGAhBw22bOrtWBSWUK/fdMoxp76xtCB9SsB/
qZfsianbV02APBVR/Qfy+FTgAGMLnWb9TUTNX5Pltv12qOTYTCDYRVM6wzyeddgA
rqP/c3JJF17EWopm/EVdFvEBv19TAduh3LN3BKZnrb7UVITRxs1ouwimoSgxx49B
Fm9FujTdykxdvr1q9zNH15NQCB9Al/Np6rEWjVIqM39UgI/muzaj3YdowDukQmRd
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 66803679512075504095996693593874764560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-11 23:30:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-22 00:00:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Irvine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mindfireinc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.mdl.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26951563452781109146057106392320226867107000374229101798015474952460603726911991854852083812187781988271179003750789017090612383066931286354568744127269341469194633587084064186594382380309598888000395093878687446126016630170284238938965547827285598923799327864755580089993702511150115546208965454260860994738074217442916082208995375929856279017354403501537507855236546290516823457160534480645279233472204278201703889873993923035009212008348742274919543512527007662929090692110470340849541123982874948530651309660094007907158238537985025279028193304796415915389367590604571312619101468167282531565955541987601938668817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2929 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letsgo.lasell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albion-college.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGLoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.tabor.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGProLoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borrowelastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgpowercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defineURLIFE.peace.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.onetoone.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elevateuploader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.monmouthcollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.samford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igive2epic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcometothefamily-customerdirect.m.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petcothinkadoptionfirst.m.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.afw.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.dashboard.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.admin.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.purl.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsite.container.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.championshipcommitment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybhgcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycapitalnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nominatestudentleaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quote.onetoone.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxgames.leehealthfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rxgames.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smhf-givegratitude.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportecfs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supporthm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applymjur.stmarytx.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urpromises.thomas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my-dv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'your.lr.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGLending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grouplegalplanoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investdbq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewards.kewadin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applyelastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itspersonal.martinmethodist.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.hendrix.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metpdpnetworkdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhgandbanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metpdp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umadnessinmarch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lake-watch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getsxm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igive2epic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getsxm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werhome.oc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobltycarpetone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elephants.win2wild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hippos.win2wild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhinos.win2wild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.btpeds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingmu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citidemo.sandyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myprobucksgift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welcometoharvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edwardsupdate.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.keystone.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promise.keystone.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getinfo.cps.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvcscholarship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optin.onestarrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepitfrosty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BHGPersonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theedge.guilford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belongat.bw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visit.bw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firespringpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymccalling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'TFCadventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DiscoverLACollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theBCdifference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faulknerlawschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverShorter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'BPCforMe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'TransfertoMC.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'YourMCcalling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flavors.centrisfcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bstrong.wtamu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extraordinary.rmc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.backtohastings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motiontosucceed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wpc4cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportsacredheartgreenwich.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supportsbp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.dwight.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornhuskerbankpowerchecking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metdhmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.coker.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darden-rfp.sandyesademo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imustgo.mhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getrisecredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myemprisebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.belmontabbeycollege.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helpyourretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coffeewithtravis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdlcrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcfulfill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getkasasacash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getkasasacashback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourelastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.c1mm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisianacollegedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shorterudigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onelimestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rittersoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorehpu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorebrenau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorewwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorewestminster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourloyola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gohusson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorelesley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorelvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoveraic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youbelongatwells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gonewmanu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorenewcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinkmeredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.linfield.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.championshipcommitment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getkasasaloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifecall.truett.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opportunity.shawu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a1314db99980bca72c5b4d2506e65b0a8f34952
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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