thegortonsfisherman.com

Issued by R3

About this certificate

This digital certificate with serial number 04:b0:08:4c:21:ea:ca:78:6b:e5:70:ab:4c:da:a8:cb:ab:f1 was issued on by Let's Encrypt.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=thegortonsfisherman.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b0:08:4c:21:ea:ca:78:6b:e5:70:ab:4c:da:a8:cb:ab:f1
Serial Number (int): 408349869431575252631383408866043873700849
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9a:fd:9c:5c:25:27:f7:3d:a7:63:fa:00:6a:0c:82:e1:98:41:d4:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1d:11:11:e5:95:93:c6:43:e7:42:07:89:b6:01:cc:09:11:52:7d:f1
Fingerprint (sha256): 4e:65:6b:b0:5d:da:d9:97:6e:21:1f:b7:5b:e1:63:40:89:56:09:d8:4a:0e:60:09:77:e6:b9:bc:d9:82:74:54

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate thegortonsfisherman.com

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thegortonsfisherman.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

250ahttwww.doctorswithoutborders.org
aav.doctorswithoutborders.org
almacengencero.fundacionexito.org
asulahh.gsm.cornell.edu
caster.ssw.upenn.edu
dev.vexana.dana.org
dns.gsm.cornell.edu
hokibet.ufcespanol.com
homer.nacha.org
houston-prod.adl.org
ini-buat-dev-hokibet.ufcespanol.com
ini-buat-test-hokibet.ufcespanol.com
laetoto-dev.rockhurst.edu
laetoto-test.rockhurst.edu
laetoto.rockhurst.edu
lai1.gsm.cornell.edu
legacy.state.mn.us
live.legalaidnyc.org
magazine.merrimack.edu
mail.emmytvlegends.org
marketing.govdelivery.com
mbox.ulpdx.org
mfa-write.vcfa.edu
multiculturalprograms.nebrwesleyan.edu
newstoday.dana.org
piosymposium.du.edu
polkadot.ufcespanol.com
rbsweb2.rutgers.edu
redmitoto-dev.gsm.cornell.edu
redmitoto-test.gsm.cornell.edu
redmitoto.gsm.cornell.edu
register.gsm.cornell.edu
sa.dana.org
situs-togel-hadiah.fronterasdesk.org
situs-togel-terbesar.ufcespanol.com
slot-via-dana.ufcespanol.com
slothoki88.gsm.cornell.edu
test-12.gsm.cornell.edu
thegortonsfisherman.com
three-dev.gsm.cornell.edu
three.gsm.cornell.edu
travelstaging.usc.edu
view.vcom.edu
w77-dev.gsm.cornell.edu
w77-test.gsm.cornell.edu
w77.gsm.cornell.edu
webserver.ardms.org
ww2.gsm.cornell.edu
www.apapun-test.rockhurst.edu
www.bowl.doctorswithoutborders.org
www.brk.gsm.cornell.edu
www.delta.dev.oceana.org
www.demo-slot.dev.oceana.org
www.emergencymedicine.utoronto.ca
www.ipongkw.dev.oceana.org
www.lvtienda.aagrapevine.org
www.m.dev.oceana.org
www.preplay.ufcespanol.com
www.rtplive.gsm.cornell.edu
www.sfmayor.org
www.smart.gsm.cornell.edu
www.std.vilcek.org
www.uni.gsm.cornell.edu
www.unu.gsm.cornell.edu

Other certificates including the domain name thegortonsfisherman.com

(limited to 100 certificates)
thegortonsfisherman.com
thegortonsfisherman.com

Certificate

The complete raw certificate details for thegortonsfisherman.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSnemv0wZzcXAgMkBQX
ztwjNHFrHpIs5axrzzrdlw7T+GZAQLPiUvSZmF3ScRQ1Ni77M7wvvj8WKgEm6kmk
IGsqEr1NwVO/9M+bfL4ePy1ywV87Wx7ZOVVK4JWJMqctOtWZynJz3jX67Nda0+9B
++4/N4TAaLpUnxu83mMaTL+l/8yYin0iItxxZ3YRMvL8oMO9BWqFighCSszfIpRu
fGHjpEeodJZe7aLi7DcePvwyXZWi/al1YQeCdFkrpkcgk8myhP/APzQjk3bdKAlw
KQDdvQR4Y3b+bMJVibDWVrVqjLz+ybpaAJiOjKOmp9NDC6LZPJujVsE+mvYR8y2Z
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408349869431575252631383408866043873700849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-12 00:15:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 00:15:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thegortonsfisherman.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295278889261962340330570593076765092564594026629510040566849443941721212705222905469227342749655760761925628146467776896918161669177237506061638055976839317974540229085566909601290432792766688540743857041618507082302908209321494362376641574366690514136936988276436757394515726000349835912320682069511736058985263380188984941851626522348036976567257123937402752130277851931257557691396509910741392947845349707974538616547869499133806197294376341097227039876415788275764051935080580783290065738507278734728703160147978353048962982659390140744073959855669537306275821116832669307766091573181749448001568724078979553621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9afd9c5c2527f73da763fa006a0c82e19841d49a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1663 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '250ahttwww.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aav.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almacengencero.fundacionexito.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asulahh.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caster.ssw.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.vexana.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dns.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hokibet.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homer.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houston-prod.adl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ini-buat-dev-hokibet.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ini-buat-test-hokibet.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laetoto-dev.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laetoto-test.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laetoto.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lai1.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.state.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.legalaidnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.merrimack.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.emmytvlegends.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbox.ulpdx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfa-write.vcfa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multiculturalprograms.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newstoday.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piosymposium.du.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polkadot.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbsweb2.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redmitoto-dev.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redmitoto-test.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redmitoto.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situs-togel-hadiah.fronterasdesk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situs-togel-terbesar.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-via-dana.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slothoki88.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-12.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegortonsfisherman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'three-dev.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'three.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelstaging.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view.vcom.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w77-dev.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w77-test.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w77.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webserver.ardms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww2.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apapun-test.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowl.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brk.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delta.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demo-slot.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emergencymedicine.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipongkw.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvtienda.aagrapevine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preplay.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rtplive.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfmayor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smart.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.std.vilcek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uni.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unu.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cfb3d03b80000040300473045022100d11e2477b7301057942431f2abd110ab4770945d32e3010b1ef8341cfa81ed7902202f0c51ca786d8d2ab0f3634b0c8c5dc15a3b4d1f18ee165a171d951b6a86c70700770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cfb3d040d0000040300483046022100e0cb59689b2ff4b6d60228a8df5bb6d289425285620336ec3a8f94daf94f4a5d022100b6faf08394f305583c99db010cdafe396bbd16e87153da14fd540de894ce2c70
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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