cmmb-portal.cmmb.org

Issued by R3

About this certificate

This digital certificate with serial number 03:65:20:77:c2:d2:e8:fe:c3:bd:f9:ab:a3:b5:00:72:6f:6b was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cmmb-portal.cmmb.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:65:20:77:c2:d2:e8:fe:c3:bd:f9:ab:a3:b5:00:72:6f:6b
Serial Number (int): 295748533984984293452315447568010403016555
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a0:fe:4a:5b:77:f4:77:b0:2b:00:21:7d:ee:ca:3e:a9:a5:fe:40:24
Fingerprint (sha256): 50:f7:28:fa:a9:06:e6:d6:55:34:0e:04:e0:08:dd:7b:c2:3a:30:0a:91:c5:37:f2:c4:20:8b:46:94:2c:04:12

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cmmb-portal.cmmb.org

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cmmb-portal.cmmb.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cmmb-portal.cmmb.org
cms.legacy.com
coins.rutgers.edu
confucius.eastasian.ucsb.edu
connect.iadb.org
covid.usmle.org
cqn-erc.arizona.edu
crmtest.eastdunbarton.gov.uk
csc.arizona.edu
d7.cmc.edu
d7store.juilliard.edu
daniela.patch.com
design-engineering.princeton.edu
dev-camdenbase.libraries.rutgers.edu
dev-covid19.chop.edu
dev-lp-jhubsph.edu.help
dev-web-degacc.edu.help
dev-web-jhucareycoop.edu.help
dev-www2.ofx.com
dev.business-services.upenn.edu
dev.cee.cornell.edu
dev.champions-speakers.co.uk
dev.ctd.northwestern.edu
dev.dhsri.yale.edu
dev.ece.cornell.edu
dev.embody.yale.edu
dev.engineering.cornell.edu
dev.mae.cornell.edu
dev.mse.cornell.edu
dev.nebrwesleyan.edu
dev.onlineeducation.psu.edu
dev.ptp.brown.edu
dev.shibtest7.isc.upenn.edu
dev.wrightlaboratory.yale.edu
dev.wti.yale.edu
dev1.engineering.ucsb.edu
dev1.si.umich.edu
devdr.azmex.arizona.edu
dial.sralab.org
dlpe.calc.gatech.edu
dmats.spcs.stanford.edu
dmats.stanford.edu
ds.arizona.edu
ebot200.multidevcom.uaf.edu
ecalso.berkeley.edu
ecc.nacha.org
education.ss.pacific.edu
ehs.sph.berkeley.edu
eis.dev.cms1.asa.uw.edu
embody.yale.edu
engaginghumanities.ucsb.edu
engineering.ss.pacific.edu
environment.research.yale.edu
eventsinfo.presidio.edu
expeditions.sandiegozoo.org
explore.hunterbusinessschool.edu
exploringthecomplexity.ucdavis.edu
faculty.gsm.ucdavis.edu
fecc.nacha.org
flta.cli.asu.edu
gem.business.ucdenver.edu
get.pima.edu
giftcertificates.cookbookcooks.com
gil.engineering.asu.edu
gis.archbalt.org
giveto.shawnee.edu
gpf.nacha.org
gsefilms.gse.upenn.edu
gtpe.pe.gatech.edu
hcii.cs.cmu.edu
healthed.sfsu.edu
healthsciences.ss.pacific.edu
home.earthjustice.org
host2.cenmi.org
host2.openminds.com
host3.cenmi.org
host90.farmermac.com
hr-kiosk.tsu.edu
httpbin.earthjustice.org
iam.earthjustice.org
igert.ucsb.edu
india-test.generation.org
industri40.ida.dk
info-dev.calperformances.org
info.religionnews.com
info.vcfa.edu
infonet.fia.org
inks.govdelivery.com
inside.gc.cuny.edu
inside.kjzz.org
internal.gcir.org
international.research.ucsb.edu
internetcouncil.nacha.org
intranet.olivecrest.org
ipv6.earthjustice.org
it-chat.web.arizona.edu
it.22squared.com
it.uahs.arizona.edu
itcatalyst.sfsu.edu

Other certificates including the domain name cmmb.org

(limited to 100 certificates)
carpepm.almonds.com
cmmb.org
calendar.sdzsafaripark.org
3fadmin.govdelivery.com
streetfilms.org
cdn-test.battlefields.org
citeak.multidevcom.uaf.edu
www.cmmb.org
chns120.courseresource.yale.edu
old.cmmb.org
161511-web1.vilcek.org
streetfilms.org
chns168.courseresource.yale.edu
sts.cmmb.org
club.kjzz.org
cmmb.org
www.cmmb.org
act.cmmb.org
chns168.courseresource.yale.edu
cmmb.org
buyersguide.aaps.org
myassets.cmmb.org
afscme57.org
old.cmmb.org
cdi.uga.edu
chns168.courseresource.yale.edu
caldesignlab.berkeley.edu
careers.whittier.edu
cloudapp-eu.appcelerator.com
chns130.courseresource.yale.edu
live-legacy-cms.pantheonsite.io
streetfilms.org
streetfilms.org
streetfilms.org
chns150.courseresource.yale.edu
cci520-new.courtinnovation.org
cci520-new.courtinnovation.org
campaign.ucsc.edu
old.cmmb.org
chns130.courseresource.yale.edu
caldesignlab.berkeley.edu
cmmb.org
cetys.udesa.edu.ar
census.arizona.edu
chns168.courseresource.yale.edu
thepointalehouse.com
cetys.udesa.edu.ar
email.cmmb.org
www.cmmb.org
old.cmmb.org
banking-business-review.com
cmmb.org
ssims.cmmb.org
thepointalehouse.com
afscme57.org
chem674.multidevcom.uaf.edu
citeak.multidevcom.uaf.edu
hamiltonexhibition.com
consignee.cmmb.org
chem674.multidevcom.uaf.edu
cmmb.org
thepointalehouse.com
cetys.udesa.edu.ar
appnavp.rockhurst.edu
citeak.multidevcom.uaf.edu
chem674.multidevcom.uaf.edu
carpepm.almonds.com
cmmb.org
wptblog.org
chem674.multidevcom.uaf.edu
161511-web1.vilcek.org
calendar.sdzsafaripark.org
email.cmmb.org
afscme57.org
caminosseguros.iadb.org
www.cmmb.org
cmmb.org
calendar.sdzsafaripark.org
chem674.multidevcom.uaf.edu
haitimdp.cmmb.org
citeak.multidevcom.uaf.edu
boxoffice.mcny.org
campaign.ucsc.edu
banking-business-review.com
myassets.cmmb.org
careers.whittier.edu
5bdrtglterperecaya.connorsstate.edu
161511-web1.vilcek.org
caldesignlab.berkeley.edu
www.cmmb.org
caminosseguros.iadb.org
caminosseguros.iadb.org
census.arizona.edu
cmmb-portal.cmmb.org
account.cmmb.org
citeak.multidevcom.uaf.edu
cmmb.org
citeak.multidevcom.uaf.edu
floridahospitalcancer.com
cmmb.org

Certificate

The complete raw certificate details for cmmb-portal.cmmb.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295748533984984293452315447568010403016555
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-15 11:52:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-13 11:52:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cmmb-portal.cmmb.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2279 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmmb-portal.cmmb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.legacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coins.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confucius.eastasian.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.iadb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid.usmle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cqn-erc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmtest.eastdunbarton.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd7.cmc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd7store.juilliard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daniela.patch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design-engineering.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-camdenbase.libraries.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-covid19.chop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-lp-jhubsph.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-web-degacc.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-web-jhucareycoop.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www2.ofx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.business-services.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cee.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.champions-speakers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dhsri.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ece.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.embody.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.engineering.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ptp.brown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.shibtest7.isc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wrightlaboratory.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wti.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.engineering.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.si.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devdr.azmex.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dial.sralab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlpe.calc.gatech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.spcs.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebot200.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecalso.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecc.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehs.sph.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eis.dev.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embody.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engaginghumanities.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engineering.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'environment.research.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventsinfo.presidio.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expeditions.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.hunterbusinessschool.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploringthecomplexity.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faculty.gsm.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fecc.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flta.cli.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gem.business.ucdenver.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.pima.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcertificates.cookbookcooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gil.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveto.shawnee.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpf.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsefilms.gse.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtpe.pe.gatech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcii.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthed.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthsciences.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host2.cenmi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host2.openminds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host3.cenmi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host90.farmermac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr-kiosk.tsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'httpbin.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iam.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igert.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'india-test.generation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industri40.ida.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info-dev.calperformances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.vcfa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infonet.fia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inks.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.gc.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.kjzz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.gcir.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international.research.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetcouncil.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.olivecrest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv6.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-chat.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.22squared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcatalyst.sfsu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0044ed8c226f5a49ab667562d8c329120304fe1e24c00e4255df2919f5f5446ca62a3f1f9922f64c20f5ba38994582157e55759c035e86bca613a57d524d198ce037335c6b60aaca74aff09728b6bd3bf17b62492a791a5a0ad72542c56f5261838c97da3d80928625282f00ab05fc5638c08a6a8c18d930bb3f7be5adacb54ef645bd7a608b720c9b3e89aa501113a77de5e48cd6fabebe9134a5e17a8aea1c86ce8e7fe4f0e75db392f1b13328f6e598bb7fe0cf9afe3dad1dd3fcc5cce0a5e2fa266507e3bf418951e2b50e9afad8f5cd2997a45376c345d2119f18498ea6e8c45db6c72517a437689d6b0cbce0172a3ff881dfdb49d56abb91772c9b0679e3