jc.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:0b:d8:d6:4c:ff:14:ee:c4:c6:bd:aa:64:2f:52:a8:75:ff was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jc.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0b:d8:d6:4c:ff:14:ee:c4:c6:bd:aa:64:2f:52:a8:75:ff
Serial Number (int): 352480475723461367638708252847796562458111
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9a:fd:9c:5c:25:27:f7:3d:a7:63:fa:00:6a:0c:82:e1:98:41:d4:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b9:cf:49:aa:da:a9:1a:05:f3:7d:3c:fb:1d:91:06:03:27:dc:c6:1b
Fingerprint (sha256): 5e:05:3d:52:76:01:47:fc:ac:29:51:44:7f:aa:a8:6e:22:4a:c0:01:a3:0f:bc:f8:e0:30:53:31:2c:9e:81:67

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jc.edu

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1.govdelivery.com
252fwww.doctorswithoutborders.org
2d252fcontent.govdelivery.com
a-filer-records.hosting.cornell.edu
accreditation.gatewaycc.edu
afbc-submission.banking.unsw.edu.au
aggievote.ucdavis.edu
arabsinamerica.unc.edu
blog.teachingandlearning.unc.edu
bmeclub.bme.ncsu.edu
bostoto.rockhurst.edu
carolinabond.unc.edu
carolinamxlescholars.unc.edu
catalog.antiochsb.edu
ccblog.ashevillenc.gov
ccli.unc.edu
changealife.rmu.edu
chilebase.oceana.org
cinemadigitalmedia.ucdavis.edu
commonground.usc.edu
cors.jsums.edu
datacenter.isdi.education
dev.aep.cornell.edu
dev.bog.georgetown.edu
dev.erdf.appcelerator.com
dev.newsbusters.org
dev.ophd.pantheon.berkeley.edu
developers-new.nwea.org
emergingtech.newstatesman.com
fms.umd.edu
food.dev.oceana.org
freeorder.dev.oceana.org
geniuschallenge.ny.gov
geo.nysenate.gov
heal.ucdavis.edu
hooverlab.engineering.asu.edu
hr.ahsc.arizona.edu
hub.uahs.arizona.edu
humantrafficking.unc.edu
instructional-continuity.id.ucsb.edu
intelligence.coronavirus.wa.gov
intldev.oceana.org
jc.edu
jcsu.edu
jobs.rainscapes.com
lactation.sfsu.edu
live-ua-chandler.pantheonsite.io
live.haas-executive.pantheon.berkeley.edu
livecntest.ppld.org
lsee.humboldt.edu
mail.as-coa.org
mediasandbox.cas.msu.edu
meridian-180.eforums.cornell.edu
mrc.vermont.gov
new.atr.org
onlineradiologydegree.adu.edu
onq.kqed.org
pentest.web.arizona.edu
phyloloab.test.franklinresearch.uga.edu
pr-377.pantheon-multidev.ufc.com
psp.sandiegozoowildlifealliance.org
pubsafeweb.rutgers.edu
pubtogel-takingmeasure.blogs.govdelivery.com
qe.uchicago.edu
sbobet.sites.intg.voya.com
sbsm.dev.oceana.org
ssp.dce.harvard.edu
staging.law.georgetown.edu
staging.mrctv.org
tai-rds.braggcrane.com
telemicroscopy.berkeley.edu
test.engmanagement.cornell.edu
test.ophd.pantheon.berkeley.edu
togeltoto.doctorswithoutborders.org
tt.arizona.edu
vitals.medicine.utoronto.ca
wpp.wustl.edu
www.acupunctureboard.az.gov
www.admission.berkeley.edu
www.apsmuseum.org
www.asc.usc.edu
www.bcf.arl.arizona.edu
www.bis.uga.edu
www.boec.az.gov
www.brand.cce.cornell.edu
www.caldining.berkeley.edu
www.cals-mac.arizona.edu
www.campusrec.arizona.edu
www.circle.berkeley.edu
www.dev.ag.ny.gov
www.fms.umd.edu
www.gfellerwallerlaw.unc.edu
www.global.rutgers.edu
www.hr.ahsc.arizona.edu
www.italianacademy.columbia.edu

Other certificates including the domain name jc.edu

(limited to 100 certificates)
communityadvancementfirm.com
mail.jc.edu
sts.jc.edu
asikmpo.discoverlosangeles.com
mail.jc.edu
mail.jc.edu
secure.jc.edu
aruba.jc.edu
mail.jc.edu
jc.edu
jc.edu
*.jc.edu
sts.jc.edu
aruba.jc.edu
1.govdelivery.com
secure.jc.edu
www.jc.edu
asikmpo.discoverlosangeles.com
jc.edu
mail.jc.edu
jc.edu
jc.edu
jc.edu
1.govdelivery.com
jc.edu
jc.edu
secure.jc.edu
secure.jc.edu
jc.edu
jc.edu
mail.jc.edu
jc.edu
jc.edu
mail.jc.edu
secure.jc.edu
mail.jc.edu
secure.jc.edu
jc.edu
secure.jc.edu
jc.edu
mail.jc.edu
jc.edu
aruba.jc.edu
mail.jc.edu
mail.jc.edu
jc.edu
mail.jc.edu
sts.jc.edu
sts.jc.edu
mail.jc.edu
secure.jc.edu
jc-ad5.jc.edu
jc.edu
aruba.jc.edu
mail.jc.edu
mail.jc.edu

Certificate

The complete raw certificate details for jc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSnemv0wZzcXAgMkBQX
ztwjNHFrHpIs5axrzzrdlw7T+GZAQLPiUvSZmF3ScRQ1Ni77M7wvvj8WKgEm6kmk
IGsqEr1NwVO/9M+bfL4ePy1ywV87Wx7ZOVVK4JWJMqctOtWZynJz3jX67Nda0+9B
++4/N4TAaLpUnxu83mMaTL+l/8yYin0iItxxZ3YRMvL8oMO9BWqFighCSszfIpRu
fGHjpEeodJZe7aLi7DcePvwyXZWi/al1YQeCdFkrpkcgk8myhP/APzQjk3bdKAlw
KQDdvQR4Y3b+bMJVibDWVrVqjLz+ybpaAJiOjKOmp9NDC6LZPJujVsE+mvYR8y2Z
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 352480475723461367638708252847796562458111
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 09:36:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 09:36:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295278889261962340330570593076765092564594026629510040566849443941721212705222905469227342749655760761925628146467776896918161669177237506061638055976839317974540229085566909601290432792766688540743857041618507082302908209321494362376641574366690514136936988276436757394515726000349835912320682069511736058985263380188984941851626522348036976567257123937402752130277851931257557691396509910741392947845349707974538616547869499133806197294376341097227039876415788275764051935080580783290065738507278734728703160147978353048962982659390140744073959855669537306275821116832669307766091573181749448001568724078979553621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9afd9c5c2527f73da763fa006a0c82e19841d49a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2380 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '252fwww.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2d252fcontent.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-filer-records.hosting.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accreditation.gatewaycc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afbc-submission.banking.unsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggievote.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arabsinamerica.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.teachingandlearning.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmeclub.bme.ncsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bostoto.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolinabond.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolinamxlescholars.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.antiochsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccblog.ashevillenc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccli.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changealife.rmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chilebase.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinemadigitalmedia.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commonground.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cors.jsums.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datacenter.isdi.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bog.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.erdf.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.newsbusters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers-new.nwea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergingtech.newstatesman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeorder.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniuschallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geo.nysenate.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heal.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hooverlab.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.ahsc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humantrafficking.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instructional-continuity.id.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligence.coronavirus.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intldev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.rainscapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lactation.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-ua-chandler.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.haas-executive.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livecntest.ppld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsee.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediasandbox.cas.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meridian-180.eforums.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrc.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.atr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineradiologydegree.adu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onq.kqed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pentest.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phyloloab.test.franklinresearch.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr-377.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psp.sandiegozoowildlifealliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubsafeweb.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubtogel-takingmeasure.blogs.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qe.uchicago.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbobet.sites.intg.voya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbsm.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssp.dce.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.law.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mrctv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tai-rds.braggcrane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telemicroscopy.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.engmanagement.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togeltoto.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tt.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitals.medicine.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpp.wustl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acupunctureboard.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admission.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apsmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asc.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcf.arl.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bis.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boec.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brand.cce.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caldining.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cals-mac.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campusrec.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circle.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.ag.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fms.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfellerwallerlaw.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.global.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hr.ahsc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.italianacademy.columbia.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018caffef6470000040300483046022100fc3a6dd519fab34931d9b0e8abcfa318cbe643f93148357c328cbd3d884cbc480221008c50a5c25d4a7ad40efdbc68214bddeab620ef4f840c6d3efc01d66ab47e650100770029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018caffef7600000040300483046022100848f7011fb714f5a1964e771d3d3f370ee31fc11ab54f6d8b0a896ed7841ac55022100ed256f8fd365989dd02614852788c04fdac60719524a7347ba72397f953823af
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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