5755553334689792-fe2.pantheonsite.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:70:c7:8f:31:b8:54:8c:ad:4b:69:2f:85:1d:11:70:82:82 was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=5755553334689792-fe2.pantheonsite.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:70:c7:8f:31:b8:54:8c:ad:4b:69:2f:85:1d:11:70:82:82
Serial Number (int): 299713742768480035877185106695446252782210
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b0:ad:28:7d:6c:db:11:b0:47:19:b8:bd:da:4e:7c:cc:71:97:ba:f8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 24:41:81:99:2f:64:ac:1f:2a:a1:6c:0b:ac:38:18:df:76:eb:61:d9
Fingerprint (sha256): 4e:03:5a:8b:ed:b0:b7:64:89:93:1d:32:50:95:39:8f:49:fc:9c:80:8e:62:eb:aa:a3:82:c9:12:f6:97:2c:07

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 5755553334689792-fe2.pantheonsite.io

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 5755553334689792-fe2.pantheonsite.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

5755553334689792-fe2.pantheonsite.io
acir.yale.edu
alumni-fellow-election.yale.edu
alumnigroups.usc.edu
bptraininggrant.yale.edu
bradfordlab.yale.edu
cbb.yale.edu
cbsi.md
celebratewomen.yale.edu
cgab.yale.edu
chubbfellowship.yale.edu
cpcr.ipch.yale.edu
democracyinamerica.yale.edu
dev.assessment-module.yale.edu
dev.bptraininggrant.yale.edu
dev.celebratewomen.yale.edu
dev.cersi.yale.edu
dev.cgab.yale.edu
dev.earth.yale.edu
dev.events.president.yale.edu
dev.gpsenate.yale.edu
dev.greencatering.yale.edu
dev.koellelab.yale.edu
dev.latinawomenatyale.sites.yale.edu
dev.leitnerobservatory.yale.edu
dev.microbialsciences.yale.edu
dev.printer-blogarchive.yale.edu
dev.readinggroups.macmillan.yale.edu
dev.researchday.yale.edu
dev.restoration.elti.yale.edu
dev.rsvp.investments.yale.edu
dev.sisprograms.yale.edu
dev.software.yale.edu
dev.southasia.migrationconference.yale.edu
dev.usability.yale.edu
dev.yale.edu
dev.ycaa.yale.edu
dustyhale.com
ejclinic.yale.edu
epi.envirocenter.yale.edu
epi.yale.edu
greeklife.yale.edu
ildcollaborative.org
itpartners.yale.edu
microbialsciences.yale.edu
mor.yale.edu
ncginc.com
peaceways.yale.edu
poynter.yale.edu
restoration.elti.yale.edu
spcl.yale.edu
swensenfellows.yale.edu
tlcmedicalcenter.com
tst.assessment-module.yale.edu
tst.cgab.yale.edu
tst.chubbfellowship.yale.edu
tst.communications.yale.edu
tst.ctl.yale.edu
tst.ejclinic.yale.edu
tst.fgli.yalecollege.yale.edu
tst.marquandchapel.yale.edu
tst.onhsa.yale.edu
tst.postwarcultureatbeinecke.yale.edu
tst.rsvp.invest.yale.edu
tst.screens.yale.edu
tst.seas.yale.edu
tst.secretary.yale.edu
tst.southasia.migrationconference.yale.edu
tst.swensenfellows.yale.edu
tst.tenthousandrooms.yale.edu
tst.vrep.yale.edu
tst.ydsifc.sites.yale.edu
uiwunion.org
ukcsf.org
wellness.yale.edu
wiki.connellypartners.com
winter.newark.rutgers.edu
women.yale.edu
www.alumni-fellow-election.yale.edu
www.cbb.yale.edu
www.cbsi.md
www.decidetode-side.com
www.dentistwellington.co.nz
www.epi.yale.edu
www.ildcollaborative.org
www.ncginc.com
www.templeemanuel.org
www.tlcmedicalcenter.com
www.ukcsf.org
yalewell.yale.edu
ycaa.yale.edu
ydsifc.sites.yale.edu
ysphmentorship.yale.edu

Other certificates including the domain name 5755553334689792-fe2.pantheonsite.io

(limited to 100 certificates)
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io
5755553334689792-fe2.pantheonsite.io

Certificate

The complete raw certificate details for 5755553334689792-fe2.pantheonsite.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5w7cFBQKV0ZAmz/6EzNV
PXAg62/gopdzhdFKtdwrP7/qu5ZH4bW3P509aO4vvuT6m6AsAgyWmMtSVHTjSO+S
AWPjP7RiQpBhi32utt3VPWaE2Qqo8HGvSSsrXLtFigG6DFHbPeBdGHGj4wWQqxWP
M2xwNFGg8rEAEE+AR/h7QPVE3NWTJGuhQ19kaBIlCynwy/ggzmF+524r6kGmsp/R
pO1jBB3Dt7dqqLmtcL2BSxsP6F49wQJLl8xQHmncvBDmyXLGB8vLEzx0xdgfks8G
q4jMi04zQpJjwXRuG9RECeaTrcfABwb5gEy8GkonTyuM+JGgR4jTJuVTI4JWluzC
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299713742768480035877185106695446252782210
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-11 22:49:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-10 22:49:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5755553334689792-fe2.pantheonsite.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29168376029145948373794962978731830303103301886710704942153624222506600681699931657011283128223630243545968773684619213763478574464820586388029336577057793324037663242174500534635626160066506692470829972901988579832273152044351892968362980395718088285017397794135614913197106730544815924862274579840517084180487288373455017347549940090987440829640363011615380060936187026394271943885162812722269598732510662511509847542199618338348670932854622617909652843273592703773361490199614258527587867566672308613733180724688747132289154558377748623179688840308892554568336925544373440588450892271502108901389231658647860068867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0ad287d6cdb11b04719b8bdda4e7ccc7197baf8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2239 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5755553334689792-fe2.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acir.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni-fellow-election.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnigroups.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bptraininggrant.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradfordlab.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbb.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbsi.md'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebratewomen.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgab.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chubbfellowship.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcr.ipch.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'democracyinamerica.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.assessment-module.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bptraininggrant.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.celebratewomen.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cersi.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cgab.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.earth.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.events.president.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gpsenate.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.greencatering.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.koellelab.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.latinawomenatyale.sites.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.leitnerobservatory.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.microbialsciences.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.printer-blogarchive.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.readinggroups.macmillan.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.researchday.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.restoration.elti.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.rsvp.investments.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sisprograms.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.software.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.southasia.migrationconference.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.usability.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ycaa.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dustyhale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejclinic.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epi.envirocenter.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epi.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greeklife.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ildcollaborative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itpartners.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microbialsciences.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mor.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peaceways.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poynter.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restoration.elti.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spcl.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swensenfellows.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tlcmedicalcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.assessment-module.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.cgab.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.chubbfellowship.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.communications.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.ctl.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.ejclinic.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.fgli.yalecollege.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.marquandchapel.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.onhsa.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.postwarcultureatbeinecke.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.rsvp.invest.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.screens.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.seas.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.secretary.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.southasia.migrationconference.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.swensenfellows.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.tenthousandrooms.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.vrep.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.ydsifc.sites.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uiwunion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukcsf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellness.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.connellypartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winter.newark.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'women.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumni-fellow-election.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbb.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbsi.md'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.decidetode-side.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dentistwellington.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epi.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ildcollaborative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.templeemanuel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tlcmedicalcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ukcsf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yalewell.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ycaa.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ydsifc.sites.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ysphmentorship.yale.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000165cb0a2f340000040300483046022100da0afd5f3004c956f34650709a17159339904162f415d8cef9349f82ffb339f2022100db075bfaa0f88aabf20905a55b54539a2ce8c3d7d33900826379b50dbd54c6ee007700a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000165cb0a2f360000040300483046022100bf099da48293c2e2d579c4bd15ca11fad13348bdbe7754fbd3de31e1eeddf8a3022100fbc4bf65d1622cbb25b23e1e266f1ea0998a8e36c50433a062fbf7f54d8b5d55
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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