jc.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:cd:19:ee:56:31:0a:e1:ed:8c:23:c1:dc:60:6b:ea:d2:de was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jc.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cd:19:ee:56:31:0a:e1:ed:8c:23:c1:dc:60:6b:ea:d2:de
Serial Number (int): 418241497160553099639721790905269086769886
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fa:a7:30:22:60:b8:bb:18:b0:b5:6f:68:a3:cc:39:72:13:cb:22:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 70:43:0d:db:5b:b8:af:55:d7:d4:7f:c1:23:1a:6a:14:10:38:d5:a5
Fingerprint (sha256): 52:74:79:ac:7c:aa:39:b2:77:d1:c7:20:6f:7b:84:99:1e:4c:29:da:14:be:39:24:90:98:e9:38:4c:ec:1c:b5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jc.edu

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1.govdelivery.com
252fwww.doctorswithoutborders.org
2d252fcontent.govdelivery.com
a-filer-records.hosting.cornell.edu
accreditation.gatewaycc.edu
afbc-submission.banking.unsw.edu.au
aggievote.ucdavis.edu
arabsinamerica.unc.edu
blog.teachingandlearning.unc.edu
bmeclub.bme.ncsu.edu
bostoto.rockhurst.edu
carolinabond.unc.edu
carolinamxlescholars.unc.edu
catalog.antiochsb.edu
ccblog.ashevillenc.gov
ccli.unc.edu
chilebase.oceana.org
cinemadigitalmedia.ucdavis.edu
commonground.usc.edu
cors.jsums.edu
datacenter.isdi.education
dev.aep.cornell.edu
dev.bog.georgetown.edu
dev.erdf.appcelerator.com
dev.newsbusters.org
dev.ophd.pantheon.berkeley.edu
developers-new.nwea.org
emergingtech.newstatesman.com
fms.umd.edu
food.dev.oceana.org
freeorder.dev.oceana.org
geniuschallenge.ny.gov
geo.nysenate.gov
heal.ucdavis.edu
hooverlab.engineering.asu.edu
hr.ahsc.arizona.edu
hub.uahs.arizona.edu
humantrafficking.unc.edu
instructional-continuity.id.ucsb.edu
intelligence.coronavirus.wa.gov
intldev.oceana.org
jc.edu
jcsu.edu
jobs.rainscapes.com
lactation.sfsu.edu
live-ua-chandler.pantheonsite.io
live.haas-executive.pantheon.berkeley.edu
livecntest.ppld.org
lsee.humboldt.edu
mail.as-coa.org
mediasandbox.cas.msu.edu
meridian-180.eforums.cornell.edu
mrc.vermont.gov
new.atr.org
onlineradiologydegree.adu.edu
onq.kqed.org
pentest.web.arizona.edu
phyloloab.test.franklinresearch.uga.edu
pr-377.pantheon-multidev.ufc.com
psp.sandiegozoowildlifealliance.org
pubsafeweb.rutgers.edu
pubtogel-takingmeasure.blogs.govdelivery.com
qe.uchicago.edu
sbobet.sites.intg.voya.com
sbsm.dev.oceana.org
ssp.dce.harvard.edu
staging.law.georgetown.edu
staging.mrctv.org
tai-rds.braggcrane.com
telemicroscopy.berkeley.edu
test.engmanagement.cornell.edu
test.ophd.pantheon.berkeley.edu
togeltoto.doctorswithoutborders.org
tt.arizona.edu
vitals.medicine.utoronto.ca
wpp.wustl.edu
www.acupunctureboard.az.gov
www.admission.berkeley.edu
www.apsmuseum.org
www.asc.usc.edu
www.bcf.arl.arizona.edu
www.bis.uga.edu
www.boec.az.gov
www.brand.cce.cornell.edu
www.caldining.berkeley.edu
www.cals-mac.arizona.edu
www.campusrec.arizona.edu
www.circle.berkeley.edu
www.dev.ag.ny.gov
www.fms.umd.edu
www.gfellerwallerlaw.unc.edu
www.global.rutgers.edu
www.hr.ahsc.arizona.edu
www.italianacademy.columbia.edu
www.lrsc.nodak.edu

Other certificates including the domain name jc.edu

(limited to 100 certificates)
communityadvancementfirm.com
mail.jc.edu
sts.jc.edu
asikmpo.discoverlosangeles.com
mail.jc.edu
mail.jc.edu
secure.jc.edu
aruba.jc.edu
mail.jc.edu
jc.edu
jc.edu
*.jc.edu
sts.jc.edu
aruba.jc.edu
1.govdelivery.com
secure.jc.edu
www.jc.edu
asikmpo.discoverlosangeles.com
jc.edu
mail.jc.edu
jc.edu
jc.edu
jc.edu
1.govdelivery.com
jc.edu
jc.edu
secure.jc.edu
secure.jc.edu
jc.edu
jc.edu
mail.jc.edu
jc.edu
jc.edu
mail.jc.edu
secure.jc.edu
mail.jc.edu
secure.jc.edu
jc.edu
secure.jc.edu
jc.edu
mail.jc.edu
jc.edu
aruba.jc.edu
mail.jc.edu
mail.jc.edu
jc.edu
mail.jc.edu
sts.jc.edu
sts.jc.edu
mail.jc.edu
secure.jc.edu
jc-ad5.jc.edu
jc.edu
aruba.jc.edu
mail.jc.edu
mail.jc.edu

Certificate

The complete raw certificate details for jc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSnemv0wZzcXAgMkBQX
ztwjNHFrHpIs5axrzzrdlw7T+GZAQLPiUvSZmF3ScRQ1Ni77M7wvvj8WKgEm6kmk
IGsqEr1NwVO/9M+bfL4ePy1ywV87Wx7ZOVVK4JWJMqctOtWZynJz3jX67Nda0+9B
++4/N4TAaLpUnxu83mMaTL+l/8yYin0iItxxZ3YRMvL8oMO9BWqFighCSszfIpRu
fGHjpEeodJZe7aLi7DcePvwyXZWi/al1YQeCdFkrpkcgk8myhP/APzQjk3bdKAlw
KQDdvQR4Y3b+bMJVibDWVrVqjLz+ybpaAJiOjKOmp9NDC6LZPJujVsE+mvYR8y2Z
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418241497160553099639721790905269086769886
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 10:46:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-20 10:46:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295278889261962340330570593076765092564594026629510040566849443941721212705222905469227342749655760761925628146467776896918161669177237506061638055976839317974540229085566909601290432792766688540743857041618507082302908209321494362376641574366690514136936988276436757394515726000349835912320682069511736058985263380188984941851626522348036976567257123937402752130277851931257557691396509910741392947845349707974538616547869499133806197294376341097227039876415788275764051935080580783290065738507278734728703160147978353048962982659390140744073959855669537306275821116832669307766091573181749448001568724078979553621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							faa7302260b8bb18b0b56f68a3cc397213cb2214
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2379 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '252fwww.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2d252fcontent.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-filer-records.hosting.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accreditation.gatewaycc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afbc-submission.banking.unsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggievote.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arabsinamerica.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.teachingandlearning.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmeclub.bme.ncsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bostoto.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolinabond.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolinamxlescholars.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.antiochsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccblog.ashevillenc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccli.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chilebase.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinemadigitalmedia.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commonground.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cors.jsums.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datacenter.isdi.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bog.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.erdf.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.newsbusters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers-new.nwea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergingtech.newstatesman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeorder.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniuschallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geo.nysenate.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heal.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hooverlab.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.ahsc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humantrafficking.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instructional-continuity.id.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligence.coronavirus.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intldev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.rainscapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lactation.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-ua-chandler.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.haas-executive.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livecntest.ppld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsee.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediasandbox.cas.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meridian-180.eforums.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrc.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.atr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineradiologydegree.adu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onq.kqed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pentest.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phyloloab.test.franklinresearch.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr-377.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psp.sandiegozoowildlifealliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubsafeweb.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubtogel-takingmeasure.blogs.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qe.uchicago.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbobet.sites.intg.voya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbsm.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssp.dce.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.law.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mrctv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tai-rds.braggcrane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telemicroscopy.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.engmanagement.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togeltoto.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tt.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitals.medicine.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpp.wustl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acupunctureboard.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admission.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apsmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asc.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcf.arl.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bis.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boec.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brand.cce.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caldining.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cals-mac.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campusrec.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circle.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.ag.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fms.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfellerwallerlaw.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.global.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hr.ahsc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.italianacademy.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lrsc.nodak.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dc65716530000040300483046022100accd2d12a5a4ea8d1818efcfc33446a3eaf86c45269a413f95304d23de290d83022100e32f6f3df1aad4c27c0607097fec19ad6138abed437c201120108f3057108fa200750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dc65716aa00000403004630440220719bb538370d969228bc0d56e96b3b9e1a6e11af62bf4dcc602e2e7d626e6e41022006b21044f08cba330b769a440b203f780475d3d30079719beec8bf27f350fdf4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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