5738940401188864-fe3.pantheonsite.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6f:8b:a8:04:fe:bb:44:bf:49:6c:e5:89:13:b0:58:b5:ab was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=5738940401188864-fe3.pantheonsite.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6f:8b:a8:04:fe:bb:44:bf:49:6c:e5:89:13:b0:58:b5:ab
Serial Number (int): 299293835622102795042030108378597569377707
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:c9:0d:15:a8:e9:df:c9:b4:7b:80:78:15:b0:6c:9a:4a:f2:ed:fc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 07:68:63:b5:48:c5:d0:fd:80:89:74:12:28:50:b4:87:f2:15:d6:cc
Fingerprint (sha256): 50:87:43:16:67:2b:2c:9c:eb:4f:fd:18:02:a2:79:3a:25:98:c1:ba:3b:51:e3:e8:f8:23:5b:cb:53:13:5d:0d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 5738940401188864-fe3.pantheonsite.io

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 5738940401188864-fe3.pantheonsite.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3trailscorridor.com
5738940401188864-fe3.pantheonsite.io
alodyne.com
altmanlabreunion.yale.edu
archive.chernerchair.com
cttraindevelop.yale.edu
dev.africa-china.yale.edu
dev.gradprointramurals.yale.edu
dev.gsa.yale.edu
dev.hixon.yale.edu
dev.msaw.southasia.macmillan.yale.edu
dev.nearlab.research.yale.edu
dev.nhanewsletter.yale.edu
dev.physics-openhouse.yale.edu
dev.pitch.yale.edu
dev.postlab.yale.edu
dev.scg2015.yale.edu
dev.soccer.yale.edu
dev.span-port.yale.edu
dev.syorchestra.sites.yale.edu
dev.yaleclubhockey.sites.yale.edu
dev.yhchallenge.yale.edu
glassshop.yale.edu
gradprointramurals.yale.edu
homeinsulationcompany.com
ipmpestcontrol.ca
ismcongregations.yale.edu
pecdevice.yale.edu
plico.com
qa.decodingcancer.org
reflections.yale.edu
relaxthebackfranchise.com
richlandlibrary.com
rmbooks.com
scg2015.yale.edu
sewickleywater.org
shapiro.macmillan.yale.edu
sospub.stagingaz.gov
spsyale.sites.yale.edu
syorchestra.sites.yale.edu
thedishonestyproject.com
togetherintheuk.co.uk
tst.ar2012.yale.edu
tst.arabianpeninsula.yale.edu
tst.empires.yale.edu
tst.filmstudies.yale.edu
tst.glassshop.yale.edu
tst.gradprointramurals.yale.edu
tst.gsa.yale.edu
tst.improvepolypharmacy.yale.edu
tst.lightscattering.yale.edu
tst.mbbretreat.yale.edu
tst.physics-openhouse.yale.edu
tst.pitch.yale.edu
tst.politicalthought.yale.edu
tst.refugee.macmillan.yale.edu
tst.scg2015.yale.edu
tst.shapiro.macmillan.yale.edu
tst.syorchestra.sites.yale.edu
tst.unexpectedconnections.yalecollege.yale.edu
tst.womeninphysics.sites.yale.edu
tst.womenscenter.yale.edu
tst.wwn.yale.edu
tst.yalebellydance.sites.yale.edu
tst.yaleclubhockey.sites.yale.edu
tst.ydscomunidad.sites.yale.edu
uarts.academy
uarts.app
uarts.biz
uarts.club
uarts.co
uarts.gallery
uarts.io
uarts.me
uarts.net
uarts.online
uarts.shop
uarts.xyz
udw.architecture.yale.edu
verticaliq.com
womeninphysics.sites.yale.edu
womenscenter.yale.edu
www.3trailscorridor.com
www.alodyne.com
www.annenbergphotospace.net
www.ballasthavenhomes.org
www.dandolegal.com
www.homeinsulationcompany.com
www.ipmpestcontrol.ca
www.plico.com
www.richlandlibrary.com
www.rmbooks.com
www.sewickleywater.org
www.thedishonestyproject.com
www.thinktechnology.com.au
www.togetherintheuk.co.uk
www.verticaliq.com
yalebellydance.sites.yale.edu
yaleclubhockey.sites.yale.edu
yhchallenge.yale.edu

Other certificates including the domain name 5738940401188864-fe3.pantheonsite.io

(limited to 100 certificates)
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io
5738940401188864-fe3.pantheonsite.io

Certificate

The complete raw certificate details for 5738940401188864-fe3.pantheonsite.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOwzCCDaugAwIBAgISA2+LqAT+u0S/SWzliROwWLWrMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTkxNzM3MTBaFw0y
MDA2MTcxNzM3MTBaMC8xLTArBgNVBAMTJDU3Mzg5NDA0MDExODg4NjQtZmUzLnBh
bnRoZW9uc2l0ZS5pbzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALkP
IyP9hjM6Wvyoj1iXfotB5fKxZf7oY/5jSlAVZjILUw7L+25OfgFm80tdqvNU7qW3
KNOXrpWZgttw/FFL+HhJrM0q+GybHF5A+FYJHJM0yWSq1L/O/TclCK/sfvF4bi6V
S+Ig1Dl1U+H7eSyE79PDO2Jn4jmZDKp02fRDrBqtAJsRq4CiY66h6ZMB1C2jIR6m
hCQ2pqBUxgaqQOtPaOg9HY7ZI0/GXWc5ohw7xUd6BUSr9uuuDV3DACNH8Zv139Tx
8uX0mPLnxNrZqxLxT+k9ia21UujyhXT30e0DGfw4jwb0QB+alUOew5jZQwouPXyG
wz/6JIfpxcfR1itYp1UCAwEAAaOCC7wwggu4MA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUOskNFajp38m0e4B4FbBsmkry7fwwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3
pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz
cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy
dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCCCXIGA1UdEQSCCWkwggllghMzdHJh
aWxzY29ycmlkb3IuY29tgiQ1NzM4OTQwNDAxMTg4ODY0LWZlMy5wYW50aGVvbnNp
dGUuaW+CC2Fsb2R5bmUuY29tghlhbHRtYW5sYWJyZXVuaW9uLnlhbGUuZWR1ghhh
cmNoaXZlLmNoZXJuZXJjaGFpci5jb22CF2N0dHJhaW5kZXZlbG9wLnlhbGUuZWR1
ghlkZXYuYWZyaWNhLWNoaW5hLnlhbGUuZWR1gh9kZXYuZ3JhZHByb2ludHJhbXVy
YWxzLnlhbGUuZWR1ghBkZXYuZ3NhLnlhbGUuZWR1ghJkZXYuaGl4b24ueWFsZS5l
ZHWCJWRldi5tc2F3LnNvdXRoYXNpYS5tYWNtaWxsYW4ueWFsZS5lZHWCHWRldi5u
ZWFybGFiLnJlc2VhcmNoLnlhbGUuZWR1ghpkZXYubmhhbmV3c2xldHRlci55YWxl
LmVkdYIeZGV2LnBoeXNpY3Mtb3BlbmhvdXNlLnlhbGUuZWR1ghJkZXYucGl0Y2gu
eWFsZS5lZHWCFGRldi5wb3N0bGFiLnlhbGUuZWR1ghRkZXYuc2NnMjAxNS55YWxl
LmVkdYITZGV2LnNvY2Nlci55YWxlLmVkdYIWZGV2LnNwYW4tcG9ydC55YWxlLmVk
dYIeZGV2LnN5b3JjaGVzdHJhLnNpdGVzLnlhbGUuZWR1giFkZXYueWFsZWNsdWJo
b2NrZXkuc2l0ZXMueWFsZS5lZHWCGGRldi55aGNoYWxsZW5nZS55YWxlLmVkdYIS
Z2xhc3NzaG9wLnlhbGUuZWR1ghtncmFkcHJvaW50cmFtdXJhbHMueWFsZS5lZHWC
GWhvbWVpbnN1bGF0aW9uY29tcGFueS5jb22CEWlwbXBlc3Rjb250cm9sLmNhghlp
c21jb25ncmVnYXRpb25zLnlhbGUuZWR1ghJwZWNkZXZpY2UueWFsZS5lZHWCCXBs
aWNvLmNvbYIVcWEuZGVjb2RpbmdjYW5jZXIub3JnghRyZWZsZWN0aW9ucy55YWxl
LmVkdYIZcmVsYXh0aGViYWNrZnJhbmNoaXNlLmNvbYITcmljaGxhbmRsaWJyYXJ5
LmNvbYILcm1ib29rcy5jb22CEHNjZzIwMTUueWFsZS5lZHWCEnNld2lja2xleXdh
dGVyLm9yZ4Iac2hhcGlyby5tYWNtaWxsYW4ueWFsZS5lZHWCFHNvc3B1Yi5zdGFn
aW5nYXouZ292ghZzcHN5YWxlLnNpdGVzLnlhbGUuZWR1ghpzeW9yY2hlc3RyYS5z
aXRlcy55YWxlLmVkdYIYdGhlZGlzaG9uZXN0eXByb2plY3QuY29tghV0b2dldGhl
cmludGhldWsuY28udWuCE3RzdC5hcjIwMTIueWFsZS5lZHWCHXRzdC5hcmFiaWFu
cGVuaW5zdWxhLnlhbGUuZWR1ghR0c3QuZW1waXJlcy55YWxlLmVkdYIYdHN0LmZp
bG1zdHVkaWVzLnlhbGUuZWR1ghZ0c3QuZ2xhc3NzaG9wLnlhbGUuZWR1gh90c3Qu
Z3JhZHByb2ludHJhbXVyYWxzLnlhbGUuZWR1ghB0c3QuZ3NhLnlhbGUuZWR1giB0
c3QuaW1wcm92ZXBvbHlwaGFybWFjeS55YWxlLmVkdYIcdHN0LmxpZ2h0c2NhdHRl
cmluZy55YWxlLmVkdYIXdHN0Lm1iYnJldHJlYXQueWFsZS5lZHWCHnRzdC5waHlz
aWNzLW9wZW5ob3VzZS55YWxlLmVkdYISdHN0LnBpdGNoLnlhbGUuZWR1gh10c3Qu
cG9saXRpY2FsdGhvdWdodC55YWxlLmVkdYIedHN0LnJlZnVnZWUubWFjbWlsbGFu
LnlhbGUuZWR1ghR0c3Quc2NnMjAxNS55YWxlLmVkdYIedHN0LnNoYXBpcm8ubWFj
bWlsbGFuLnlhbGUuZWR1gh50c3Quc3lvcmNoZXN0cmEuc2l0ZXMueWFsZS5lZHWC
LnRzdC51bmV4cGVjdGVkY29ubmVjdGlvbnMueWFsZWNvbGxlZ2UueWFsZS5lZHWC
IXRzdC53b21lbmlucGh5c2ljcy5zaXRlcy55YWxlLmVkdYIZdHN0LndvbWVuc2Nl
bnRlci55YWxlLmVkdYIQdHN0Lnd3bi55YWxlLmVkdYIhdHN0LnlhbGViZWxseWRh
bmNlLnNpdGVzLnlhbGUuZWR1giF0c3QueWFsZWNsdWJob2NrZXkuc2l0ZXMueWFs
ZS5lZHWCH3RzdC55ZHNjb211bmlkYWQuc2l0ZXMueWFsZS5lZHWCDXVhcnRzLmFj
YWRlbXmCCXVhcnRzLmFwcIIJdWFydHMuYml6ggp1YXJ0cy5jbHViggh1YXJ0cy5j
b4INdWFydHMuZ2FsbGVyeYIIdWFydHMuaW+CCHVhcnRzLm1lggl1YXJ0cy5uZXSC
DHVhcnRzLm9ubGluZYIKdWFydHMuc2hvcIIJdWFydHMueHl6ghl1ZHcuYXJjaGl0
ZWN0dXJlLnlhbGUuZWR1gg52ZXJ0aWNhbGlxLmNvbYIdd29tZW5pbnBoeXNpY3Mu
c2l0ZXMueWFsZS5lZHWCFXdvbWVuc2NlbnRlci55YWxlLmVkdYIXd3d3LjN0cmFp
bHNjb3JyaWRvci5jb22CD3d3dy5hbG9keW5lLmNvbYIbd3d3LmFubmVuYmVyZ3Bo
b3Rvc3BhY2UubmV0ghl3d3cuYmFsbGFzdGhhdmVuaG9tZXMub3JnghJ3d3cuZGFu
ZG9sZWdhbC5jb22CHXd3dy5ob21laW5zdWxhdGlvbmNvbXBhbnkuY29tghV3d3cu
aXBtcGVzdGNvbnRyb2wuY2GCDXd3dy5wbGljby5jb22CF3d3dy5yaWNobGFuZGxp
YnJhcnkuY29tgg93d3cucm1ib29rcy5jb22CFnd3dy5zZXdpY2tsZXl3YXRlci5v
cmeCHHd3dy50aGVkaXNob25lc3R5cHJvamVjdC5jb22CGnd3dy50aGlua3RlY2hu
b2xvZ3kuY29tLmF1ghl3d3cudG9nZXRoZXJpbnRoZXVrLmNvLnVrghJ3d3cudmVy
dGljYWxpcS5jb22CHXlhbGViZWxseWRhbmNlLnNpdGVzLnlhbGUuZWR1gh15YWxl
Y2x1YmhvY2tleS5zaXRlcy55YWxlLmVkdYIUeWhjaGFsbGVuZ2UueWFsZS5lZHUw
TAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcC
ARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggECBgorBgEEAdZ5AgQCBIHz
BIHwAO4AdQDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAXD0Fb0C
AAAEAwBGMEQCIBNPwY1V0mHvihM82dx3OjCoxh2yBb9ah0+JbiQXk3qVAiBkncfh
EZI4jJR70rGJcusi3qh92AwqqCmdkxu7TRRJSQB1ALIeBcyLos2KIE6HZvkruYol
IGdr2vpw57JJUy3vi5BeAAABcPQVvRoAAAQDAEYwRAIgcalMq3rv6X2G7PbowtjA
luUxyBQG5SHTO/d7aXnVfsQCIEpRk+euJKwzm0rluy0yrg/Ku1Ckp5e1nKZB94gb
O2e5MA0GCSqGSIb3DQEBCwUAA4IBAQAuTLeLd+rUwB8uYRDpLsHOL1A8l9hnTkLu
Qu1eC1HzZ03h0RRerb39mciynBeQhx1+XrNVI55WXxVED6SJai+tvEPqAtiQq/UR
16CcQhEFJkSMTBhKqCp9A1775LruHF6sjmoM9WRmMtxeToV62a267dMaot7/lBK0
u+kSCd5FsAzwbLkvEFGXv5jQJ8bbusqvXysAttEV9oyWCUjPFIMizkKlm2GkDLNI
tU/gqf3PDOBwa5MhsLHiJFEC4jaerBs3M8uzDRoyG7kZbYVZT5ffCYDdUQeeJ+Ou
LpTOkb7qcItZmgXx81Lt6SRR0AJbXGU/Oip9bP+72VQ466XFXRKe
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ8jI/2GMzpa/KiPWJd+
i0Hl8rFl/uhj/mNKUBVmMgtTDsv7bk5+AWbzS12q81Tupbco05eulZmC23D8UUv4
eEmszSr4bJscXkD4VgkckzTJZKrUv879NyUIr+x+8XhuLpVL4iDUOXVT4ft5LITv
08M7YmfiOZkMqnTZ9EOsGq0AmxGrgKJjrqHpkwHULaMhHqaEJDamoFTGBqpA609o
6D0djtkjT8ZdZzmiHDvFR3oFRKv2664NXcMAI0fxm/Xf1PHy5fSY8ufE2tmrEvFP
6T2JrbVS6PKFdPfR7QMZ/DiPBvRAH5qVQ57DmNlDCi49fIbDP/okh+nFx9HWK1in
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299293835622102795042030108378597569377707
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 17:37:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-17 17:37:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5738940401188864-fe3.pantheonsite.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23361550883736045252117561803693089703592509698645070918951383796590597008659886483560755272625671268483988209421061467474057620499861510275047191962656742782951637475731951215847874677403828206074367465816500356106235334930297266215451918720905469801690099467991082930429865448850947006543122893739657313377511420669609009789400682934226504918813417107834823244164478974966872859476115300128134587305408319228164253035694533279154609722518512656817529941434978752330906587491180818904626365904647718831036804772190001347747484840760074478159560188624450790820557300819544742635408223689361845510000876184567568443221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ac90d15a8e9dfc9b47b807815b06c9a4af2edfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2409 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3trailscorridor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5738940401188864-fe3.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alodyne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altmanlabreunion.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.chernerchair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cttraindevelop.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.africa-china.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gradprointramurals.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gsa.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.hixon.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.msaw.southasia.macmillan.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nearlab.research.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nhanewsletter.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.physics-openhouse.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.pitch.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.postlab.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.scg2015.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.soccer.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.span-port.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.syorchestra.sites.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.yaleclubhockey.sites.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.yhchallenge.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glassshop.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gradprointramurals.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeinsulationcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipmpestcontrol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ismcongregations.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pecdevice.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.decodingcancer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflections.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaxthebackfranchise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richlandlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scg2015.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sewickleywater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shapiro.macmillan.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sospub.stagingaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spsyale.sites.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syorchestra.sites.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedishonestyproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togetherintheuk.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.ar2012.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.arabianpeninsula.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.empires.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.filmstudies.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.glassshop.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.gradprointramurals.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.gsa.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.improvepolypharmacy.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.lightscattering.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.mbbretreat.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.physics-openhouse.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.pitch.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.politicalthought.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.refugee.macmillan.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.scg2015.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.shapiro.macmillan.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.syorchestra.sites.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.unexpectedconnections.yalecollege.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.womeninphysics.sites.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.womenscenter.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.wwn.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.yalebellydance.sites.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.yaleclubhockey.sites.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.ydscomunidad.sites.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uarts.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uarts.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uarts.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uarts.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uarts.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uarts.gallery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uarts.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uarts.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uarts.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uarts.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uarts.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uarts.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udw.architecture.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verticaliq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womeninphysics.sites.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenscenter.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3trailscorridor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alodyne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annenbergphotospace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ballasthavenhomes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dandolegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeinsulationcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipmpestcontrol.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rmbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sewickleywater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedishonestyproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinktechnology.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togetherintheuk.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verticaliq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yalebellydance.sites.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaleclubhockey.sites.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yhchallenge.yale.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170f415bd0200000403004630440220134fc18d55d261ef8a133cd9dc773a30a8c61db205bf5a874f896e2417937a950220649dc7e11192388c947bd2b18972eb22dea87dd80c2aa8299d931bbb4d144949007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170f415bd1a0000040300463044022071a94cab7aefe97d86ecf6e8c2d8c096e531c81406e521d33bf77b6979d57ec402204a5193e7ae24ac339b4ae5bb2d32ae0fcabb50a4a797b59ca641f7881b3b67b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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