university.tektonresearch.com

Issued by R3

About this certificate

This digital certificate with serial number 03:43:46:a9:af:d6:0d:9e:f3:79:af:b2:fa:34:6d:13:63:ba was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=university.tektonresearch.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:46:a9:af:d6:0d:9e:f3:79:af:b2:fa:34:6d:13:63:ba
Serial Number (int): 284229703403238376371172126213564334826426
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d6:fb:b8:d5:f6:49:bd:80:54:08:c7:0c:1c:75:00:23:ce:23:2a:39
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 15:48:26:71:02:c3:6b:58:22:8b:b8:df:93:c9:3b:7a:ff:d5:8d:f2
Fingerprint (sha256): 53:d9:20:7a:fb:2d:b5:09:8d:fb:1a:d7:d2:ae:ca:4e:e3:52:8f:5f:6b:75:6d:99:b8:dd:a8:e4:81:78:75:12

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate university.tektonresearch.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for university.tektonresearch.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

academy.boulderinsight.com
academy.tomtom.com
adiconnect.wintellplus.com
aipc.polo-development.com
alp.arcsystechnologies.com
arc.polo-development.com
associate-prep.toonboom.com
austin.academyfortourism.com
bermuda.academyfortourism.com
bhsa.mysportsanalysis.com
brand.polo-development.com
branson.academyfortourism.com
cclearning.enercare.ca
chattanooga.academyfortourism.com
class.potawatomi.org
client.trubytraining.com
competence.rosen-group.com
connect.wintellplus.com
courses.securitytokenadvisors.com
cpe.arcsystechnologies.com
development.accurateusa.com
dj-2.tovuti.io
downspoloclub.polo-development.com
edu.4redi.net
edu.brandonsandbox.com
education.infor.com
elearning.toyota.com.ph
ellerston.polo-development.com
fairchild.trubytraining.com
gaain.glymedplus.com
georgialms.stchealth.us
glearning.grimco.com
hca.ekgguy.com
hclsoftwareu.hcltechsw.com
huntershill.polo-development.com
internal.hedgucation.assurehedge.com
larapinta.polo-development.com
learn.astho.org
learn.tomtom.com
learn.treceducation.com
learning.cocacolaswb.com
learning.dayta.com
learning.servicon.com
learning.unitedforalice.org
learning.ware2go.co
litifam-training.litify.com
lms.brandonsandbox.com
lms.enercare.ca
lms.enercare.dev
martincounty.academyfortourism.com
meadowbrookpoloclub.polo-development.com
mohit-test.polo-development.com
ncpc.polo-development.com
notatradingacademy.stockspilgrim.com
polobern.polo-development.com
poloireland.polo-development.com
polopark.polo-development.com
sandbox.employindy.org
scone.polo-development.com
seq.polo-development.com
staff.arcsystechnologies.com
test.polo-development.com
testclub.polo-development.com
tovuti.tylerandrewwilson.com
training.endosign.com
training.litify.com
ucdavis.boulderinsight.com
uni.airportlogistics.org
uni.bradfordconsolidation.com
university.cyclelabs.io
university.potawatomi.org
university.tektonresearch.com
usvi.academyfortourism.com
www.achcacertification.com
www.bbmanestream.com
www.bloombehive.com
www.canadianheart.org
www.casatlearning.org
www.engamged.com
www.hca.ekgguy.com
www.learn-experiencemanitouregion.ca
www.learn-exploreedmonton.com
www.learn-pqbtourism.com
www.learnproremodeling.com
www.mbdi-lms.org
www.mymoyotovuti.com
www.pathwaymandatory.com
www.pdnow.com
www.prmamalcom.com
www.pts.org
www.scpportal.com
www.theperfectuniversity.net
www.tourismeconnect.ca
www.trubytraining.com
www.visitorfriendlyalberta.ca
www.youngchristianprofessionals.com

Other certificates including the domain name tektonresearch.com

(limited to 100 certificates)
ssl378725.cloudflaressl.com
farmviability.oahurcd.org
irishpolofoundation.polo-development.com
www.educate.ekgguy.com
educate.ekgguy.com
www.learn-experiencemanitouregion.ca
vicpolo.polo-development.com
queenslandpolo.polo-development.com
irishpolofoundation.polo-development.com
plataforma.pedago.cl
farmviability.oahurcd.org
farmviability.oahurcd.org
farmviability.oahurcd.org
learn.oahurcd.org
www.tridotacademy.com
wapolo.polo-development.com
book.dragonnapper.com
wapolo.polo-development.com
book.dragonnapper.com
queenslandpolo.polo-development.com
learning.edenuf.com
ssl378725.cloudflaressl.com
educate.ekgguy.com
farmviability.oahurcd.org
irishpolofoundation.polo-development.com
sapa.polo-development.com
www.educate.ekgguy.com
www.learn-experiencemanitouregion.ca
irishpolofoundation.polo-development.com
educate.ekgguy.com
www.educate.ekgguy.com
irishpolofoundation.polo-development.com
educate.ekgguy.com
learn.oahurcd.org
farmviability.oahurcd.org
university.tektonresearch.com
irishpolofoundation.polo-development.com
educate.ekgguy.com
educate.ekgguy.com
farmviability.oahurcd.org
ssl378725.cloudflaressl.com
educate.ekgguy.com
hpaumpire.mysportsanalysis.com
edu.4redi.net
sni.cloudflaressl.com
www.tridotacademy.com
queenslandpolo.polo-development.com
farmviability.oahurcd.org
learn.oahurcd.org
farmviability.oahurcd.org
www.educate.ekgguy.com
ssl378725.cloudflaressl.com
ssl378725.cloudflaressl.com
wrightway.polo-development.com
learn.oahurcd.org
educate.ekgguy.com
www.robertsgordonacademy.com
tektonresearch.com
edu.4redi.net
www.educate.ekgguy.com
sni.cloudflaressl.com
farmviability.oahurcd.org
tektonresearch.com
farmviability.oahurcd.org
wapolo.polo-development.com
www.robertsgordonacademy.com
edu.4redi.net
queenslandpolo.polo-development.com
oakbrook.polo-development.com
edu.4redi.net
irishpolofoundation.polo-development.com
sni.cloudflaressl.com
www.educate.ekgguy.com
sni.cloudflaressl.com
ssl378725.cloudflaressl.com
farmviability.oahurcd.org
www.educate.ekgguy.com
book.dragonnapper.com
educate.ekgguy.com
oakbrook.polo-development.com
www.educate.ekgguy.com
irishpolofoundation.polo-development.com
wapolo.polo-development.com
www.educate.ekgguy.com
wapolo.polo-development.com
www.learn-experiencemanitouregion.ca
www.learn-experiencemanitouregion.ca
southdakotalms.stchealth.us
southdakotalms.stchealth.us
farmviability.oahurcd.org
www.learn-experiencemanitouregion.ca
educate.ekgguy.com
learning.edenuf.com
edu.4redi.net
ssl378725.cloudflaressl.com
www.dragonnapper.com
wapolo.polo-development.com
learning.edenuf.com
wapolo.polo-development.com
ssl378725.cloudflaressl.com

Certificate

The complete raw certificate details for university.tektonresearch.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWrft6ftR+aJOne+rMdQ
RYwlKbb7jC0NqtQgLwUOK3Zlut3LA53+L+vevFR9gvYbxIma7IqiV2czNz0uyVk7
T0Be+W4isoU/9pUCHulh5ZhYlaDXmkdNcVil5jsvPDb5r0vO3NlNyLEguwHA7AyV
8wa2yJZ/6ybxFSNWO74cqTaG6BcjCljzT4ZXWbX2iNSS68ruck6KcmO3rW+M8ceZ
7vfxo2uubewWJJ7x9QmKZ7aBYljW4W58Dn35vLrqfzwoA5VgCV9al3BG8q8J+B+r
LYZM1qkUEF28NC+gSrKUdmxht4RSwgKMo2fAAjhemGS2DAbxwAwnLIMvLvf7eZDS
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284229703403238376371172126213564334826426
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 12:08:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 12:08:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'university.tektonresearch.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21891928241514887859277734941677619555560510097550570717929429652328824949504064740519705311238778862455879145283105762393577160951991596242682184020229301012864276964816870219209295382498602223316958400380006638288465090676325472462139639715025706018827716387324694952603884299371387063202467118981836512664962724039032910615124242931915680428607822474264007928532171615463152826863385723612611741662767243104497308297209089816713047155666849644609895671452126084937515821796896027442831664829298675505178309949106490273034293461618739832532446477570144073681546011753045946468288724383537463548488266537755795837601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6fbb8d5f649bd805408c70c1c750023ce232a39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2535 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.boulderinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.tomtom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adiconnect.wintellplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aipc.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alp.arcsystechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arc.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'associate-prep.toonboom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austin.academyfortourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bermuda.academyfortourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhsa.mysportsanalysis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branson.academyfortourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cclearning.enercare.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chattanooga.academyfortourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'class.potawatomi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.trubytraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'competence.rosen-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.wintellplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courses.securitytokenadvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpe.arcsystechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development.accurateusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dj-2.tovuti.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downspoloclub.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu.4redi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu.brandonsandbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education.infor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearning.toyota.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellerston.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairchild.trubytraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaain.glymedplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgialms.stchealth.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glearning.grimco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hca.ekgguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hclsoftwareu.hcltechsw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntershill.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.hedgucation.assurehedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larapinta.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.astho.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.tomtom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.treceducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.cocacolaswb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.dayta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.servicon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.unitedforalice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.ware2go.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litifam-training.litify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.brandonsandbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.enercare.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.enercare.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martincounty.academyfortourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meadowbrookpoloclub.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mohit-test.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncpc.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notatradingacademy.stockspilgrim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polobern.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poloireland.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polopark.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.employindy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scone.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seq.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff.arcsystechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testclub.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tovuti.tylerandrewwilson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.endosign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.litify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucdavis.boulderinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni.airportlogistics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni.bradfordconsolidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'university.cyclelabs.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'university.potawatomi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'university.tektonresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usvi.academyfortourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.achcacertification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbmanestream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bloombehive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadianheart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casatlearning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.engamged.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hca.ekgguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learn-experiencemanitouregion.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learn-exploreedmonton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learn-pqbtourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learnproremodeling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbdi-lms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymoyotovuti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pathwaymandatory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prmamalcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scpportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theperfectuniversity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tourismeconnect.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trubytraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitorfriendlyalberta.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.youngchristianprofessionals.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018afff49d340000040300473045022100e380e5b4377058d760b2d38d880c859d59ded2c34cb49bb36b78b15f2c1b3e72022014b81b82ca6671d336d798ba80c7d151ad4856872a47d3b55940e474a729a7310076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018afff49d2d000004030047304502201f6d9d42d7c260cdee7273efdf370328612376b645dde4bcd2881ca7d01c236c022100c2ab9453d07662c03cbdee4593e55636db483422ae30187bad0dd2eb64ad2cbd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009e6a20dcb4d35d726c9137b7c6716d9fb139d2c2296d22d56f40514afb675ef0ced6cd1b544d27ee599a4444651f93e85378e45d47815dcf89ad7ed55d587dab8a176c04b5d7346667e0e0096d2688409c43500da69ebd25859065ee345279b5de56c8a867e4bf150da5f584d58df1308716118685f20d1d08171d055439b87649a4695fcd5f15bda2b1ef6457e6e0e3e32e9061575027f60fd20ec0cdb12630be44f3ff38651b39cd411fa78ca1f8198e7dc186593e4086e33ef0d277cb650f1bfddd96de92344a5bf5be53bd25db40fc5a013cfa8f42699857c9ffbea25d9a943475d756fa9b6d0aa8026cc2ad2942642e022eab345acfbeee9e7e6a0eaf7b