test.efc.ny.gov

Issued by R3

About this certificate

This digital certificate with serial number 03:40:82:d1:d7:71:64:e6:f2:ea:da:90:3c:b2:b7:7d:02:f7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=test.efc.ny.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:40:82:d1:d7:71:64:e6:f2:ea:da:90:3c:b2:b7:7d:02:f7
Serial Number (int): 283288818477418349294266164465449928819447
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:fd:9c:5c:25:27:f7:3d:a7:63:fa:00:6a:0c:82:e1:98:41:d4:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 71:77:11:07:23:50:ee:8c:43:6c:8b:ad:8a:af:8e:15:29:96:6e:93
Fingerprint (sha256): 5c:44:54:d2:19:5b:72:41:b5:12:b1:ce:a2:fb:ab:bc:d2:a0:a1:20:5e:b4:c8:5b:28:ed:21:3c:ce:3c:68:1f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate test.efc.ny.gov

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test.efc.ny.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test.efc.ny.gov
test.ethics3.pantheon.berkeley.edu
test.makinghistory.gwu.edu
test.ocio.osu.edu
test.radcliffe.edu
testb.test.uis.georgetown.edu
testdomain3.uis.georgetown.edu
the-fourth.cca.edu
tism.msu.edu
tl.wvu.edu
tomacau.gsm.cornell.edu
townsendlab.berkeley.edu
transitions.metrotech.edu
uat-test.worldvision.org
ucomm-sites-dev.stanford.edu
ui.connorsstate.edu
university.gsm.cornell.edu
unskippable.crs.org
updates.cjei.cornell.edu
updates.cpra.cornell.edu
vaccine.mcny.org
vibrava.rutgers.edu
viewfinder.pamm.org
virtual2.unlv.edu
vpr.arizona.edu
wanprc.washington.edu
web.commerce.virginia.edu
web1.mcny.org
webdev.colorado.edu
webtest.tsu.edu
wp.americancouncils.org
ww.as-coa.org
www-dev.southmountaincc.edu
www.aggiesvote.ucdavis.edu
www.aggievote.ucdavis.edu
www.asla.ced.berkeley.edu
www.astro.berkeley.edu
www.azmex.arizona.edu
www.belonging.berkeley.edu
www.bff.uga.edu
www.blogs.earthjustice.org
www.cas.msu.edu
www.cie.ucdavis.edu
www.comartsci.msu.edu
www.comdis.msu.edu
www.comm.msu.edu
www.cybersecurity.umass.edu
www.datahero.com
www.dev.netimpact.org
www.diplomacy.state.gov
www.discover-uhr.rutgers.edu
www.earlymodernenglishdrama.folger.edu
www.ee.udel.edu
www.enpsmobile.krtv.com
www.esc.rutgers.edu
www.eventsinfo.presidio.edu
www.executionists.com
www.extension.ucdavis.edu
www.gamma.radiology.arizona.edu
www.gim.utoronto.ca
www.giving.dartmouth.edu
www.hcii.cs.cmu.edu
www.humanities.sas.upenn.edu
www.ihe.uga.edu
www.inas2.uga.edu
www.jche.org
www.jhpiego.jhu.edu
www.leadershipgiving.ucdavis.edu
www.lgcr.com
www.lhs.berkeley.edu
www.libertytreefoundation.org
www.materialgirlcollection.com
www.nartc.fcm.arizona.edu
www.newpiper.com
www.odee-pgmo.osu.edu
www.ol.rutgers.edu
www.online.foodsafety.msu.edu
www.onlinecso.dshs.wa.gov
www.onlineeducation.psu.edu
www.projectrequest.axway.com
www.randybryceforcongress.com
www.resx.usc.edu
www.reveal.uky.edu
www.sac.ofm.wa.gov
www.spain.uga.edu
www.sph.berkeley.edu
www.ss.pacific.edu
www.strength.org
www.summer.stanford.edu
www.swcsc.arizona.edu
www.universityextension.ucdavis.edu
www.urocitk.com
www.wcsl.ece.ucsb.edu
www1.ccny.cuny.edu
www2.albion.edu
www2.ccny.cuny.edu
www2.doctorswithoutborders.org
www2.president.usc.edu
www2.stkate.edu
yqss.kjzz.org

Other certificates including the domain name ny.gov

(limited to 100 certificates)
www.tax.ny.gov
*.justicecenter.ny.gov
5638059940904960-fe3.pantheonsite.io
mail.cityofjohnstown.ny.gov
r4a10.osc.ny.gov
*.health.ny.gov
www.ciris.ny.gov
carpepm.almonds.com
5697124062724096-fe2.pantheonsite.io
5767917874446336-fe1.pantheonsite.io
*.hcr.ny.gov
5645914630782976-fe1.pantheonsite.io
5752571553644544-fe2.pantheonsite.io
el.nyserda.ny.gov
cjc.ny.gov
www.rev.ny.gov
5767917874446336-fe1.pantheonsite.io
5638059940904960-fe3.pantheonsite.io
*.health.ny.gov
tracs2.otda.ny.gov
ocra.omh.ny.gov
it.uahs.arizona.edu
learn.apps.loopstart.net
sni.cloudflaressl.com
int.sfs.ny.gov
recovery.dhses.ny.gov
www.tax.ny.gov
www.tax.ny.gov
5638059940904960-fe3.pantheonsite.io
Appcenter1.esd.ny.gov
5202656289095680-fe4.pantheonsite.io
5752571553644544-fe2.pantheonsite.io
*.hcr.ny.gov
www.perb.ny.gov
*.hcr.ny.gov
*.oagtest.ag.ny.gov
qasc.oft.ny.gov
bonds.hcr.ny.gov
*.opwdd.ny.gov
*.health.ny.gov
doccs-ndid.digital-dev.dmv.ny.gov
calendar.sdzsafaripark.org
devwebcloud.health.ny.gov
www.oscar.ny.gov
www.rev.ny.gov
dev.ag.ny.gov
youthworks.ny.gov
steuben911.ny.gov
APPS.OCFS.NY.GOV
recovery.dhses.ny.gov
mhprovider.qa.omh.ny.gov
vhc.wcb.ny.gov
*.dos.ny.gov
banking-business-review.com
climate.ny.gov
cdn-test.battlefields.org
5752571553644544-fe2.pantheonsite.io
WestchesterCDPS.ny.gov
*.omh.ny.gov
GardenCity.ny.gov
citeak.multidevcom.uaf.edu
qa.my.ny.gov
booking.virtualhometour.sg
portwashingtonpd.ny.gov
r5a20.osc.ny.gov
fulton.ny.gov
ertfin.sfs.ny.gov
*.criminaljustice.ny.gov
cortlandcounty.ny.gov
uihp2.labor.ny.gov
5697124062724096-fe2.pantheonsite.io
hcstgbi.osc.ny.gov
applications.labor.ny.gov
www2.dps.ny.gov
DOCCS-Submetering.BMS.ny.gov
chns120.courseresource.yale.edu
my.justicecenter.ny.gov
*.dec.ny.gov
bonds.hcr.ny.gov
*.troopers.ny.gov
5202656289095680-fe4.pantheonsite.io
vpcr-qa.justicecenter.ny.gov
data.ny.gov
ccf.ny.gov
*.ocfs.ny.gov
vhc.wcb.ny.gov
dmna.ny.gov
qa-ldap.ny.gov
pay-92qanyspows.osc.ny.gov
online.ogs.ny.gov
nystateofhealth.ny.gov
5202656289095680-fe4.pantheonsite.io
www7f.tax.ny.gov
labor.ny.gov
allegany.ny.gov
vpn3.dfs.ny.gov
RAVPN.FRG.NY.GOV
qasc.oft.ny.gov
sni.cloudflaressl.com
ihstgi.osc.ny.gov

Certificate

The complete raw certificate details for test.efc.ny.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOAzCCDOugAwIBAgISA0CC0ddxZOby6tqQPLK3fQL3MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMjIwMzE5MThaFw0yNDAzMjEwMzE5MTdaMBoxGDAWBgNVBAMT
D3Rlc3QuZWZjLm55LmdvdjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMB0p3pr9MGc3FwIDJAUF87cIzRxax6SLOWsa8863ZcO0/hmQECz4lL0mZhd0nEU
NTYu+zO8L74/FioBJupJpCBrKhK9TcFTv/TPm3y+Hj8tcsFfO1se2TlVSuCViTKn
LTrVmcpyc941+uzXWtPvQfvuPzeEwGi6VJ8bvN5jGky/pf/MmIp9IiLccWd2ETLy
/KDDvQVqhYoIQkrM3yKUbnxh46RHqHSWXu2i4uw3Hj78Ml2Vov2pdWEHgnRZK6ZH
IJPJsoT/wD80I5N23SgJcCkA3b0EeGN2/mzCVYmw1la1aoy8/sm6WgCYjoyjpqfT
Qwui2Tybo1bBPpr2EfMtmVUCAwEAAaOCCykwggslMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUmv2cXCUn9z2nY/oAagyC4ZhB1JowHwYDVR0jBBgwFoAUFC6zF7dYVsuu
UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v
cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y
Zy8wggkwBgNVHREEggknMIIJI4IPdGVzdC5lZmMubnkuZ292giJ0ZXN0LmV0aGlj
czMucGFudGhlb24uYmVya2VsZXkuZWR1ghp0ZXN0Lm1ha2luZ2hpc3RvcnkuZ3d1
LmVkdYIRdGVzdC5vY2lvLm9zdS5lZHWCEnRlc3QucmFkY2xpZmZlLmVkdYIddGVz
dGIudGVzdC51aXMuZ2VvcmdldG93bi5lZHWCHnRlc3Rkb21haW4zLnVpcy5nZW9y
Z2V0b3duLmVkdYISdGhlLWZvdXJ0aC5jY2EuZWR1ggx0aXNtLm1zdS5lZHWCCnRs
Lnd2dS5lZHWCF3RvbWFjYXUuZ3NtLmNvcm5lbGwuZWR1ghh0b3duc2VuZGxhYi5i
ZXJrZWxleS5lZHWCGXRyYW5zaXRpb25zLm1ldHJvdGVjaC5lZHWCGHVhdC10ZXN0
LndvcmxkdmlzaW9uLm9yZ4IcdWNvbW0tc2l0ZXMtZGV2LnN0YW5mb3JkLmVkdYIT
dWkuY29ubm9yc3N0YXRlLmVkdYIadW5pdmVyc2l0eS5nc20uY29ybmVsbC5lZHWC
E3Vuc2tpcHBhYmxlLmNycy5vcmeCGHVwZGF0ZXMuY2plaS5jb3JuZWxsLmVkdYIY
dXBkYXRlcy5jcHJhLmNvcm5lbGwuZWR1ghB2YWNjaW5lLm1jbnkub3JnghN2aWJy
YXZhLnJ1dGdlcnMuZWR1ghN2aWV3ZmluZGVyLnBhbW0ub3JnghF2aXJ0dWFsMi51
bmx2LmVkdYIPdnByLmFyaXpvbmEuZWR1ghV3YW5wcmMud2FzaGluZ3Rvbi5lZHWC
GXdlYi5jb21tZXJjZS52aXJnaW5pYS5lZHWCDXdlYjEubWNueS5vcmeCE3dlYmRl
di5jb2xvcmFkby5lZHWCD3dlYnRlc3QudHN1LmVkdYIXd3AuYW1lcmljYW5jb3Vu
Y2lscy5vcmeCDXd3LmFzLWNvYS5vcmeCG3d3dy1kZXYuc291dGhtb3VudGFpbmNj
LmVkdYIad3d3LmFnZ2llc3ZvdGUudWNkYXZpcy5lZHWCGXd3dy5hZ2dpZXZvdGUu
dWNkYXZpcy5lZHWCGXd3dy5hc2xhLmNlZC5iZXJrZWxleS5lZHWCFnd3dy5hc3Ry
by5iZXJrZWxleS5lZHWCFXd3dy5hem1leC5hcml6b25hLmVkdYIad3d3LmJlbG9u
Z2luZy5iZXJrZWxleS5lZHWCD3d3dy5iZmYudWdhLmVkdYIad3d3LmJsb2dzLmVh
cnRoanVzdGljZS5vcmeCD3d3dy5jYXMubXN1LmVkdYITd3d3LmNpZS51Y2Rhdmlz
LmVkdYIVd3d3LmNvbWFydHNjaS5tc3UuZWR1ghJ3d3cuY29tZGlzLm1zdS5lZHWC
EHd3dy5jb21tLm1zdS5lZHWCG3d3dy5jeWJlcnNlY3VyaXR5LnVtYXNzLmVkdYIQ
d3d3LmRhdGFoZXJvLmNvbYIVd3d3LmRldi5uZXRpbXBhY3Qub3Jnghd3d3cuZGlw
bG9tYWN5LnN0YXRlLmdvdoIcd3d3LmRpc2NvdmVyLXVoci5ydXRnZXJzLmVkdYIm
d3d3LmVhcmx5bW9kZXJuZW5nbGlzaGRyYW1hLmZvbGdlci5lZHWCD3d3dy5lZS51
ZGVsLmVkdYIXd3d3LmVucHNtb2JpbGUua3J0di5jb22CE3d3dy5lc2MucnV0Z2Vy
cy5lZHWCG3d3dy5ldmVudHNpbmZvLnByZXNpZGlvLmVkdYIVd3d3LmV4ZWN1dGlv
bmlzdHMuY29tghl3d3cuZXh0ZW5zaW9uLnVjZGF2aXMuZWR1gh93d3cuZ2FtbWEu
cmFkaW9sb2d5LmFyaXpvbmEuZWR1ghN3d3cuZ2ltLnV0b3JvbnRvLmNhghh3d3cu
Z2l2aW5nLmRhcnRtb3V0aC5lZHWCE3d3dy5oY2lpLmNzLmNtdS5lZHWCHHd3dy5o
dW1hbml0aWVzLnNhcy51cGVubi5lZHWCD3d3dy5paGUudWdhLmVkdYIRd3d3Lmlu
YXMyLnVnYS5lZHWCDHd3dy5qY2hlLm9yZ4ITd3d3LmpocGllZ28uamh1LmVkdYIg
d3d3LmxlYWRlcnNoaXBnaXZpbmcudWNkYXZpcy5lZHWCDHd3dy5sZ2NyLmNvbYIU
d3d3Lmxocy5iZXJrZWxleS5lZHWCHXd3dy5saWJlcnR5dHJlZWZvdW5kYXRpb24u
b3Jngh53d3cubWF0ZXJpYWxnaXJsY29sbGVjdGlvbi5jb22CGXd3dy5uYXJ0Yy5m
Y20uYXJpem9uYS5lZHWCEHd3dy5uZXdwaXBlci5jb22CFXd3dy5vZGVlLXBnbW8u
b3N1LmVkdYISd3d3Lm9sLnJ1dGdlcnMuZWR1gh13d3cub25saW5lLmZvb2RzYWZl
dHkubXN1LmVkdYIZd3d3Lm9ubGluZWNzby5kc2hzLndhLmdvdoIbd3d3Lm9ubGlu
ZWVkdWNhdGlvbi5wc3UuZWR1ghx3d3cucHJvamVjdHJlcXVlc3QuYXh3YXkuY29t
gh13d3cucmFuZHlicnljZWZvcmNvbmdyZXNzLmNvbYIQd3d3LnJlc3gudXNjLmVk
dYISd3d3LnJldmVhbC51a3kuZWR1ghJ3d3cuc2FjLm9mbS53YS5nb3aCEXd3dy5z
cGFpbi51Z2EuZWR1ghR3d3cuc3BoLmJlcmtlbGV5LmVkdYISd3d3LnNzLnBhY2lm
aWMuZWR1ghB3d3cuc3RyZW5ndGgub3Jnghd3d3cuc3VtbWVyLnN0YW5mb3JkLmVk
dYIVd3d3LnN3Y3NjLmFyaXpvbmEuZWR1giN3d3cudW5pdmVyc2l0eWV4dGVuc2lv
bi51Y2RhdmlzLmVkdYIPd3d3LnVyb2NpdGsuY29tghV3d3cud2NzbC5lY2UudWNz
Yi5lZHWCEnd3dzEuY2NueS5jdW55LmVkdYIPd3d3Mi5hbGJpb24uZWR1ghJ3d3cy
LmNjbnkuY3VueS5lZHWCHnd3dzIuZG9jdG9yc3dpdGhvdXRib3JkZXJzLm9yZ4IW
d3d3Mi5wcmVzaWRlbnQudXNjLmVkdYIPd3d3Mi5zdGthdGUuZWR1gg15cXNzLmtq
enoub3JnMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB
8gDwAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGMj7/DPAAA
BAMARzBFAiBGp+ZhkRbiKRFLyeDEuZce9b5nkcMcmSQBzhegHJ138AIhAIFbLJDJ
TIvfbdGZl2CFfIQMgIESFynEwh9UWTl8o5qVAHYAO1N3dT4tuYBOizBbBv5AO2fY
T8P0x70ADS1yb+H61BcAAAGMj7/DQwAABAMARzBFAiBsd0P6Bl/8jkycUDgGFthv
ZQqoEQeNAOXJyYlPwF0GuAIhAO81ybjP8aAwybHQ75S26Fv2MzTOCcPUvWjPQlFH
0gJSMA0GCSqGSIb3DQEBCwUAA4IBAQBoGeIyJm1uSIicLAg3ixtKgQDwW3ntstSf
T6v88RdfknSxCXVQMAxYjX19lDcvAz+aDjUZaDF4BR5bgzIUtadjp0+xpX0DcDD1
7Iauf/cx10phzISloC7bEzTdJw/fy6gJ3npwYNlYpy7zMPktLjPYh9Qir/NEyhfb
cjMTNpc80SievAoyBCt6FzCSQagBJuBExwi4bvAro4aguhJmJf6cXAxY41cTFHqQ
OHGSpZSLRFRlYnFzzLlbNjVY3NLeFnF/FZh6S6+6YxMj0lpDvP8ptuRHHrIcAhds
j25stwDbwQAqHJcTRX3ZebLZTATYvv+Ly0RD0dM/5Tq/k0BiWitB
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSnemv0wZzcXAgMkBQX
ztwjNHFrHpIs5axrzzrdlw7T+GZAQLPiUvSZmF3ScRQ1Ni77M7wvvj8WKgEm6kmk
IGsqEr1NwVO/9M+bfL4ePy1ywV87Wx7ZOVVK4JWJMqctOtWZynJz3jX67Nda0+9B
++4/N4TAaLpUnxu83mMaTL+l/8yYin0iItxxZ3YRMvL8oMO9BWqFighCSszfIpRu
fGHjpEeodJZe7aLi7DcePvwyXZWi/al1YQeCdFkrpkcgk8myhP/APzQjk3bdKAlw
KQDdvQR4Y3b+bMJVibDWVrVqjLz+ybpaAJiOjKOmp9NDC6LZPJujVsE+mvYR8y2Z
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283288818477418349294266164465449928819447
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 03:19:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 03:19:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test.efc.ny.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295278889261962340330570593076765092564594026629510040566849443941721212705222905469227342749655760761925628146467776896918161669177237506061638055976839317974540229085566909601290432792766688540743857041618507082302908209321494362376641574366690514136936988276436757394515726000349835912320682069511736058985263380188984941851626522348036976567257123937402752130277851931257557691396509910741392947845349707974538616547869499133806197294376341097227039876415788275764051935080580783290065738507278734728703160147978353048962982659390140744073959855669537306275821116832669307766091573181749448001568724078979553621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9afd9c5c2527f73da763fa006a0c82e19841d49a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2343 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.efc.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ethics3.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ocio.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.radcliffe.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testb.test.uis.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testdomain3.uis.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-fourth.cca.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tism.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tl.wvu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomacau.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townsendlab.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transitions.metrotech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-test.worldvision.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucomm-sites-dev.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ui.connorsstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'university.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unskippable.crs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.cjei.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.cpra.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccine.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vibrava.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewfinder.pamm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtual2.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpr.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanprc.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.commerce.virginia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web1.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdev.colorado.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtest.tsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.southmountaincc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aggiesvote.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aggievote.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asla.ced.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astro.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azmex.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belonging.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bff.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blogs.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cas.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cie.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comartsci.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comdis.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comm.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cybersecurity.umass.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datahero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.netimpact.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diplomacy.state.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discover-uhr.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earlymodernenglishdrama.folger.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ee.udel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enpsmobile.krtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esc.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eventsinfo.presidio.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.executionists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamma.radiology.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gim.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giving.dartmouth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcii.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humanities.sas.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihe.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inas2.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jche.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhpiego.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leadershipgiving.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lgcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lhs.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertytreefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.materialgirlcollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newpiper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odee-pgmo.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ol.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.online.foodsafety.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinecso.dshs.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectrequest.axway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.randybryceforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reveal.uky.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sac.ofm.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spain.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sph.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strength.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summer.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swcsc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universityextension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urocitk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wcsl.ece.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.albion.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.president.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.stkate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yqss.kjzz.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c8fbfc33c0000040300473045022046a7e6619116e229114bc9e0c4b9971ef5be6791c31c992401ce17a01c9d77f0022100815b2c90c94c8bdf6dd1999760857c840c8081121729c4c21f5459397ca39a950076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c8fbfc343000004030047304502206c7743fa065ffc8e4c9c50380616d86f650aa811078d00e5c9c9894fc05d06b8022100ef35c9b8cff1a030c9b1d0ef94b6e85bf63334ce09c3d4bd68cf425147d20252
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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