5682274280407040-fe3.pantheonsite.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:15:06:1b:a2:14:18:bb:4c:e0:d2:f9:9f:87:3c:a5:f9:0e was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=5682274280407040-fe3.pantheonsite.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:15:06:1b:a2:14:18:bb:4c:e0:d2:f9:9f:87:3c:a5:f9:0e
Serial Number (int): 268490906347952910722452959806082670524686
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 75:ad:3e:60:bd:20:2c:8d:65:2e:10:55:cb:72:d4:73:3f:4a:cc:8d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4a:c6:6a:f5:65:9e:6f:07:91:e7:e7:f1:f3:b2:fc:62:42:7e:ef:9a
Fingerprint (sha256): 50:56:82:dc:6c:fc:e8:63:04:11:12:74:2a:97:28:43:80:ce:46:f0:3b:37:f9:97:56:ce:5a:27:b8:84:03:70

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 5682274280407040-fe3.pantheonsite.io

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 5682274280407040-fe3.pantheonsite.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

5682274280407040-fe3.pantheonsite.io
admissions.lipscomb.edu
alnylam.de
alumni.lipscomb.edu
amp-wp.org
andysstatewide.com
art.lipscomb.edu
ayers.lipscomb.edu
bible.lipscomb.edu
bisonalert.lipscomb.edu
business.lipscomb.edu
careercenter.lipscomb.edu
cea.lipscomb.edu
cinematicarts.lipscomb.edu
civicleadership.lipscomb.edu
counselingcenter.lipscomb.edu
cphs.lipscomb.edu
csc.lipscomb.edu
dev.skyportuniversity.com
eap.lipscomb.edu
education.lipscomb.edu
engage.lipscomb.edu
engineering.lipscomb.edu
events.the-financedirector.com
familytherapycenter.lipscomb.edu
fashiondesign.lipscomb.edu
film.lipscomb.edu
financialaid.lipscomb.edu
give.lipscomb.edu
giving.lipscomb.edu
givingcard.pittsburghfoundation.org
globallearning.lipscomb.edu
honors.lipscomb.edu
hr.lipscomb.edu
hst.lipscomb.edu
icm.lipscomb.edu
ics.lipscomb.edu
intercultural.lipscomb.edu
iq.com.br
irc1031x.com
kinesiology.lipscomb.edu
labc.co.uk
leadership.lipscomb.edu
learnenglish.lipscomb.edu
life.lipscomb.edu
littlesphotography.com
ljs.lipscomb.edu
missions.lipscomb.edu
music.lipscomb.edu
mysanitas.com
navigantcu.com
navigantcu.net
news.lipscomb.edu
nursing.lipscomb.edu
nutrition.lipscomb.edu
parents.lipscomb.edu
paschool.lipscomb.edu
peugeot.lipscomb.edu
pharmacy.lipscomb.edu
president.lipscomb.edu
professionalstudies.lipscomb.edu
publicpolicy.lipscomb.edu
racquetclub.lipscomb.edu
registrar.lipscomb.edu
research.lipscomb.edu
rickscreative.io
ricksentertainment.com
safety.lipscomb.edu
salberglaw.com
sga.lipscomb.edu
skyportuniversity.com
spark.lipscomb.edu
strataflats.com
summercelebration.lipscomb.edu
sustainability.lipscomb.edu
technology.lipscomb.edu
test-mindsmatter.demo-site.ca
test-soutienbienetre.demo-site.ca
theater.lipscomb.edu
tillstest.com
utdanacenter.tmmhosting.com
veterans.lipscomb.edu
www.alnylam.de
www.andysstatewide.com
www.infoblox.co.jp
www.iq.com.br
www.irc1031x.com
www.labc.co.uk
www.littlesphotography.com
www.myaffordabledental.com
www.mysanitas.com
www.navigantcu.com
www.navigantcu.net
www.rickscreative.io
www.salberglaw.com
www.skyportuniversity.com
www.strataflats.com
www.tillstest.com

Other certificates including the domain name 5682274280407040-fe3.pantheonsite.io

(limited to 100 certificates)
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io
5682274280407040-fe3.pantheonsite.io

Certificate

The complete raw certificate details for 5682274280407040-fe3.pantheonsite.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qocTBi+ZNUA44ygROYP
Btyj8T7q8CnFd041myuyfb7/BX2OZrLwgO4I5HtxS7F+/CeKe+8m7z9Epfh5xWvs
dl2wd4JthFhy5byfkas6AGqv2xpOOTVTLs/EWdexBBC6mEgqtaNS+oINKUiBQA7a
BtxwDdw2aPjAJV3UQz8vWa+suhtVVhb2BphxFwYyFO7WQcixS1VT8H8xXFvoOhPs
O2kW74kIHN33NyfKgv45I+v19Ja7he/pJAWnnJvesCXHhJmyro6KqxjHHitBSFeU
qG+W/6xT0fuLhot6DcYfB+M9UhAgUCb0OSZCT9kVHNYAtsApgS7mfSYpj1/SiFc/
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268490906347952910722452959806082670524686
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-30 16:24:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 16:24:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5682274280407040-fe3.pantheonsite.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28613741554124310176440679999551609410321342184027416405650405644929917402657379732979202340920239543624390746465529465973771626974119768903882529739378799010925149646866365330501342167798783923322869974896350952063777850844435518676512255391995565421286000654041822049953199324515961920927974551514341675703965111642293412937342852334154593916209456791774102618137660427832061380910617513467081009770054423917238716370453024737949604707152365342015718625104340405461703405161255526808284368006909336609227092541385150767291411644981017368780163032105679698735800877056530346121774980948803026425837224541330817367837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							75ad3e60bd202c8d652e1055cb72d4733f4acc8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2201 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5682274280407040-fe3.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admissions.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alnylam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp-wp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andysstatewide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'art.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayers.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bible.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bisonalert.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careercenter.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cea.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinematicarts.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civicleadership.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'counselingcenter.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cphs.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csc.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.skyportuniversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eap.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engineering.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.the-financedirector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familytherapycenter.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fashiondesign.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'film.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialaid.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingcard.pittsburghfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globallearning.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honors.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hst.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icm.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ics.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intercultural.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iq.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irc1031x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinesiology.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadership.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learnenglish.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'littlesphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ljs.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missions.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysanitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navigantcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navigantcu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nursing.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutrition.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parents.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paschool.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peugeot.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacy.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'president.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professionalstudies.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicpolicy.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racquetclub.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registrar.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rickscreative.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricksentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safety.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salberglaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sga.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyportuniversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strataflats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summercelebration.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainability.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technology.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-mindsmatter.demo-site.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-soutienbienetre.demo-site.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theater.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tillstest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utdanacenter.tmmhosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veterans.lipscomb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alnylam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andysstatewide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infoblox.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iq.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irc1031x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.labc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littlesphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myaffordabledental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysanitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.navigantcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.navigantcu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rickscreative.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salberglaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skyportuniversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strataflats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tillstest.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001689fca9d9400000403004730450220030eec2862be88d4cc90996b7e5e8fc6757fd150b1f6676b287577a0dcae08ce02210094b8f468dd3b008792fca48894b03a1381d98ec88deeeda5d84c8aa3fc23ce6700750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001689fca9dea00000403004630440220766ce51af0796af51405a256c15a2a2f6fa5b735e1cec81404c68b9923368e3102200a6e42fb5fb9ce53ae8d581ce4db94bb8e97ea88e0b0fa6ac6df1c6609abbced
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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