ainsworth.aspendiscovery.org

Issued by R3

About this certificate

This digital certificate with serial number 04:e9:f2:6f:94:52:4c:ef:d5:fa:62:fb:b7:7a:73:c9:2c:a3 was issued on by Let's Encrypt.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ainsworth.aspendiscovery.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e9:f2:6f:94:52:4c:ef:d5:fa:62:fb:b7:7a:73:c9:2c:a3
Serial Number (int): 428057187747868037051688457649705907203235
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bc:fc:ed:4a:66:38:3c:02:cc:92:c3:6a:e5:e0:02:ae:cc:1c:00:7f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d2:0d:4a:60:ad:0e:7f:fa:0f:70:67:c1:15:b4:96:3a:03:9d:46:c1
Fingerprint (sha256): 4f:6f:79:0a:71:fe:d5:42:72:3a:a1:86:81:93:fe:df:2e:10:3e:37:4d:cd:9e:71:48:9b:de:19:a0:35:c8:97

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ainsworth.aspendiscovery.org

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ainsworth.aspendiscovery.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ainsworth.aspendiscovery.org
ainsworth.bywatersolutions.com
bennington.aspendiscovery.org
bennington.bywatersolutions.com
brooks.aspendiscovery.org
catalog.brookslibraryvt.org
catalog.waterburypubliclibrary.com
catamount.aspendiscovery.org
children-fletcher.aspendiscovery.org
children-georgia.aspendiscovery.org
children.bennington.bywatersolutions.com
dorset.aspendiscovery.org
drml.aspendiscovery.org
drml.bywatersolutions.com
fletcher.aspendiscovery.org
fletchermemorial.bywatersolutions.com
georgia.aspendiscovery.org
georgiapublic.bywatersolutions.com
guilford.aspendiscovery.org
guilfordfree.bywatersolutions.com
hfbrigham.aspendiscovery.org
mccullough.aspendiscovery.org
mccullough.bywatersolutions.com
mclvt.aspendiscovery.org
morristown.aspendiscovery.org
morristown.bywatersolutions.com
normanwilliams.aspendiscovery.org
nwpl.bywatersolutions.com
putney.aspendiscovery.org
putney.bywatersolutions.com
putneyschool.aspendiscovery.org
putneyschool.bywatersolutions.com
reading.aspendiscovery.org
readingpl.bywatersolutions.com
royalton.aspendiscovery.org
royaltonlibrary.bywatersolutions.com
rutland.aspendiscovery.org
springfield.aspendiscovery.org
springfield.bywatersolutions.com
starksboro.aspendiscovery.org
starksboropl.bywatersolutions.com
waterbury.aspendiscovery.org
westminster.aspendiscovery.org
westrutland.aspendiscovery.org
westrutlandpubliclibrary.bywatersolutions.com
winhall.aspendiscovery.org

Other certificates including the domain name aspendiscovery.org

(limited to 100 certificates)
catalog.plumcreeklibrary.net
catalog.eulesstx.gov
abbotsford.aspendiscovery.org
opac.westchesterlibraries.org
www.uintahlibrary.org
evpl.aspendiscovery.org
darien.aspendiscovery.org
cadl.aspendiscovery.org
vokal-aspen.bywatersolutions.com
catalog.eulesstx.gov
librarycat.marionfl.org
catalog.eulesstx.gov
mckinney.aspendiscovery.org
blackgold.org
mcpl.aspendiscovery.org
clams.aspendiscovery.org
opac.westchesterlibraries.org
gmilcs.aspendiscovery.org
acpl.us
spokane.aspendiscovery.org
pit.aspendiscovery.org
catalog.sbplibrary.org
vokal-aspen.bywatersolutions.com
catalog.santafelibrary.org
monterey.aspendiscovery.org
bywaterconsortium.aspendiscovery.org
metrolibrary.aspendiscovery.org
help.aspendiscovery.org
mountainview.aspendiscovery.org
gmilcs.aspendiscovery.org
catalog.dubcolib.org
blackgold.org
gmilcs.aspendiscovery.org
catalog.dmpl.org
corvallis.aspendiscovery.org
clams.aspendiscovery.org
vokal-aspen.bywatersolutions.com
cedarpark.aspendiscovery.org
readokaloosa.org
ainsworth.aspendiscovery.org
blackgold.org
www.uintahlibrary.org
catalog.eulesstx.gov
blackgold.org
vokal-aspen.bywatersolutions.com
mountainview.aspendiscovery.org
catalog.sbplibrary.org
huntsville.aspendiscovery.org
bywaterconsortium.aspendiscovery.org
clams.aspendiscovery.org
clams.aspendiscovery.org
blackgold.org
cat.ryepubliclibrary.org
aacpl.aspendiscovery.org
acpl.us
prosper.aspendiscovery.org
ramapo-koha.aspendiscovery.org
clams.aspendiscovery.org
acpl.us
corvallis.aspendiscovery.org
prosper.aspendiscovery.org
blackgold.org
pasco.aspendiscovery.org
ainsworth.aspendiscovery.org
catalog.slolibrary.org
metrolibrary.aspendiscovery.org
payson.aspendiscovery.org
fayetteville.aspendiscovery.org
readokaloosa.org
catalog.dmpl.org
clams.aspendiscovery.org
catalog.losgatosca.gov
pcpls.aspendiscovery.org
aabrown.aspendiscovery.org
carnegiestout.aspendiscovery.org
catalog.ncwlibraries.org
blackgold.org
acpl.us
discover.knoxcountylibrary.org
abbott.aspendiscovery.org
fayetteville.aspendiscovery.org
acpl.us
clams.aspendiscovery.org
vokal-aspen.bywatersolutions.com
clams.aspendiscovery.org
maininc.aspendiscovery.org
catalog.eulesstx.gov
metroshare.aspendiscovery.org
pioneer.aspendiscovery.org
clams.aspendiscovery.org
abbotsford.aspendiscovery.org
gmilcs.aspendiscovery.org
metroshare.aspendiscovery.org
huntsville.aspendiscovery.org
catalog.ncwlibraries.org
rclstn.aspendiscovery.org
catalog.uintahlibrary.org
blackgold.org
epcounty.aspendiscovery.org
discover.knoxcountylibrary.org

Certificate

The complete raw certificate details for ainsworth.aspendiscovery.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr6v0HSyF5Ao7bsMG4+7
Q0zJY5tsnKL/0WKnKFyzN+wMOfAYTgLF6NtKOSjFBatQfHc0W0rgSDWbrQ8TT8CD
QwceQHDrO4wECLg1sbZuGwt9d62AjndYiHB0KphPpc/v62wXV3TYnNjzyyR6g1LN
an5taHUFQhJRAhkSGcSkpN37hHsQs37x8WlWCaIwqJjiN5VTGZsnz7i/5kaLhhKc
1LFw7o2UjfhgP+QjoiwRMCjSV6jsRBDMUOnp5/OcwxVHfdMWiyRnjjELSuSt35jW
VdSUkLpltV3G62EcraVv/jhLmYyHKwkBSa6Uk3ejnj0fGcQG6gXVUWMUzLs36Sld
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428057187747868037051688457649705907203235
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 05:05:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 05:05:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ainsworth.aspendiscovery.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25089215536391259367060514694676504134571593994050530648565423663978031598286512266318361453351776760293000327946984736017375006966540404836252637531983951722368827104649826045714140140170448666495602734626218001509771968424678493528701759681171879612574472312453906573991029210428007898064900345137446375335010676628402939108472724548403473348770310832696499116833625122966040546131612049632150855349358801330661391408230214240677808129723802786433667850400345998502961559646904533261394263722463841238436454764353204983993073496432559174149907283395685722369415724061419760029758501040551771880412888416502082526559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bcfced4a66383c02cc92c36ae5e002aecc1c007f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1470 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ainsworth.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ainsworth.bywatersolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bennington.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bennington.bywatersolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooks.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.brookslibraryvt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.waterburypubliclibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catamount.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'children-fletcher.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'children-georgia.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'children.bennington.bywatersolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dorset.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drml.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drml.bywatersolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fletcher.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fletchermemorial.bywatersolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgia.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgiapublic.bywatersolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guilford.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guilfordfree.bywatersolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfbrigham.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccullough.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccullough.bywatersolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mclvt.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morristown.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morristown.bywatersolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'normanwilliams.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwpl.bywatersolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'putney.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'putney.bywatersolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'putneyschool.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'putneyschool.bywatersolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reading.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readingpl.bywatersolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalton.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaltonlibrary.bywatersolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rutland.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springfield.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springfield.bywatersolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starksboro.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starksboropl.bywatersolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterbury.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westminster.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westrutland.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westrutlandpubliclibrary.bywatersolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winhall.aspendiscovery.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dbad1b2a400000403004630440220275d7e35b4fa829b247a09e4d8c83d06563c9198815e7ffa3b2bd03867f995610220587dec24129bb8a642446dfcd68416af8f6d920466fcde3814ff2f3f22b92ae1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dbad1b2b2000004030047304502200378e2485ce79945bf0bf17db845da84f456545d050e013fe8ff8de45d2cd2ed02210097fb6b81876188d2023790b5a72149ecc0510242a50722ecc43dc9a90a595a59
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00279823290e2d6322d1fff9fc2bc95ad34dc38e5b5c48037cfe43a0cfd13b7f1ca6c74864bd432e1ba24981a790912126728562e13bbdee97ad77ae778a1e41ae5f5ac7c7352d4ff58e854801c705f5f482f06e38671916694cad3e6c8960596873282dbd2bb4c1a0c65785e6de313a469eab6571f28ddf596d82c2b08972c5fb5e53a19e5de4dff48cdaf32deb8efa0fc216f2362ba11af68a516b2ceb37236f8b13798bdc92326409bd1b47e9af78a9ffaed8a4f295160b000264d0d994ee55e8da0c4044df046ab4b352d757d6db027a781f9e880533e669d2014dd24973dfcead7346c4abc5c9d387c497b4ae2915fc1ac74c48f2250dddc827967aa68594