5662543133540352-fe4.pantheonsite.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:23:2a:d6:4e:d5:7c:17:cd:bd:26:bc:21:f8:46:97:f7:6c was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=5662543133540352-fe4.pantheonsite.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:23:2a:d6:4e:d5:7c:17:cd:bd:26:bc:21:f8:46:97:f7:6c
Serial Number (int): 360415966895566478345942824354719773226860
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 21:94:73:60:6e:38:83:d3:b7:ab:c0:e8:ee:20:18:12:3c:90:82:1e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c5:31:06:95:b3:2d:cd:6d:f4:a3:05:83:15:f6:75:85:03:30:56:a1
Fingerprint (sha256): 60:cb:36:59:5a:63:a8:10:72:49:94:7a:ac:3c:28:91:01:68:84:ed:ad:50:0b:a3:bb:6f:5e:06:2f:71:b5:4b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 5662543133540352-fe4.pantheonsite.io

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 5662543133540352-fe4.pantheonsite.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

5662543133540352-fe4.pantheonsite.io
affordablelearning.osu.edu
besmokefreestudy.org
brattleborochamber.org
cleanupcarnival.com
collegeready.osu.edu
criminaljusticefailure.org
cumbriawildlifetrust.org.uk
davios.com
davioscucina.com
dev.davios.com
dev.davioscucina.com
dev.stevedifillippo.com
digitalbookstore.osu.edu
domesticviolencecourts.org
drcaineyemd.com
ehs.osu.edu
eynpartnership.org
farmcommons.org
folkets.dk
hilaryharkness.com
iilj.org
kaplanandcompany.com
langleywholesale.ca
litify.com
live.precept.org
mditlevson.us
ned30years.net
ned30years.org
nephrologistmatch.com
ohso.osu.edu
pa-gas-switch.net
pa-gas-switch.org
pagasswitch.co
pagasswitch.com
pagasswitch.net
pagasswitch.org
pagaswitch.co
pagaswitch.com
pagaswitch.net
pagaswitch.org
realcleanpaleo.com
rtf-dev.nwcouncil.org
rtf.nwcouncil.org
ryanlooper.com
shemins.com
shop.unicef.ca
sourceboard.com
stevedifillippo.com
techhub.osu.edu
test.davios.com
test.davioscucina.com
test.stevedifillippo.com
test.wellversed.org
thinktankconsulting.ca
travelyukon.com
wreckshopnation.com
www-pantheon.litify.com
www.affordablelearning.osu.edu
www.azdes.gov
www.brattleborochamber.org
www.cleanupcarnival.com
www.collegeready.osu.edu
www.cumbriawildlifetrust.org.uk
www.davios.com
www.davioscucina.com
www.digitalbookstore.osu.edu
www.drcaineyemd.com
www.ehs.osu.edu
www.eynpartnership.org
www.farmcommons.org
www.folkets.dk
www.hilaryharkness.com
www.kaplanandcompany.com
www.litify.com
www.mditlevson.us
www.ned30under30.com
www.ned30under30.net
www.ned30under30.org
www.ned30years.com
www.ned30years.net
www.ned30years.org
www.ohso.osu.edu
www.pa-gas-switch.co
www.pa-gas-switch.com
www.pa-gas-switch.net
www.pa-gas-switch.org
www.pagasswitch.co
www.pagasswitch.com
www.pagasswitch.net
www.pagasswitch.org
www.realcleanpaleo.com
www.shemins.com
www.sourceboard.com
www.stevedifillippo.com
www.techhub.osu.edu
www.thinktankconsulting.ca
www.travelyukon.com
www.wreckshopnation.com

Other certificates including the domain name 5662543133540352-fe4.pantheonsite.io

(limited to 100 certificates)
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io
5662543133540352-fe4.pantheonsite.io

Certificate

The complete raw certificate details for 5662543133540352-fe4.pantheonsite.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA272cFNQ+5Sp7MSuDY2Th
XsDIwYqsVxNCkpa1vPkwsqD21+Se4M2PM8te7pxlH1OWJKWa0El1ydLCxK8ZL8mc
bU0ZCS4C8ec5bVISYi/u3S5gXL05YAdVE0Pk3GFOJrXPOXdY3tzVhbibSmnLzJ5W
/yVNw5s0tiMQlPpsoLYS5EBszhucTX9i6Z0oBtjsO6Ak9wPhvTJj7Y8pQQn5dRl/
QhKmnotF8ZqffLbMy2/acwCAbI51ewOofR12LkUtsF8zqjixoA3X0zf4icFPBAHp
18Awk/YnHkC4t25sYWziyiq+3cvn9mjjntlCGWbBVq+APee1wxK9voDQNgrLD0Bi
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360415966895566478345942824354719773226860
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-02 05:13:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-31 05:13:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5662543133540352-fe4.pantheonsite.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27739688811893269036016379549165623345384304716432411784997726975904282396557244944884554656982237379757036775920578306420085292108863135456109976823504130306720002816762831772985480182447521425227414873317791342408889987413507450866258682576701709901276326557907494122196374920604025297368966273818165110063927789268983673991101120403710344727157320012776364954666128345090272886739830409733410913763927476572096673582698594697013000416549853567966196866156432234911170324142723152007865427093478266443505797244356280911038797441899530382336871679066660676959221264644310183132745013566615018569898569021232869565141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							219473606e3883d3b7abc0e8ee2018123c90821e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2044 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5662543133540352-fe4.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affordablelearning.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besmokefreestudy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brattleborochamber.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanupcarnival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegeready.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'criminaljusticefailure.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumbriawildlifetrust.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davioscucina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.davios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.davioscucina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.stevedifillippo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalbookstore.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domesticviolencecourts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drcaineyemd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehs.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eynpartnership.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmcommons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'folkets.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilaryharkness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iilj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaplanandcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langleywholesale.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.precept.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mditlevson.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ned30years.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ned30years.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nephrologistmatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohso.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pa-gas-switch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pa-gas-switch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagasswitch.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagasswitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagasswitch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagasswitch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagaswitch.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagaswitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagaswitch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagaswitch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realcleanpaleo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtf-dev.nwcouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtf.nwcouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryanlooper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shemins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.unicef.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourceboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevedifillippo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techhub.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.davios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.davioscucina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.stevedifillippo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.wellversed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinktankconsulting.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelyukon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wreckshopnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-pantheon.litify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affordablelearning.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azdes.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brattleborochamber.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cleanupcarnival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegeready.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cumbriawildlifetrust.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davioscucina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalbookstore.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drcaineyemd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ehs.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eynpartnership.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmcommons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.folkets.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hilaryharkness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaplanandcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.litify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mditlevson.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ned30under30.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ned30under30.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ned30under30.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ned30years.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ned30years.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ned30years.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohso.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pa-gas-switch.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pa-gas-switch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pa-gas-switch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pa-gas-switch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pagasswitch.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pagasswitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pagasswitch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pagasswitch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realcleanpaleo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shemins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sourceboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stevedifillippo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techhub.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinktankconsulting.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelyukon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wreckshopnation.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000164f944b2cb0000040300483046022100996ad4fa60cec1d94e99c1ddd904809bb61cd4db15eeb641748dcde1718e1c6c022100fe2b588113da200139bbfdb49135f6aa2413c5e5dd892745d5f40efe65a4c4c2007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164f944b4ab0000040300463044022066c8a5effe69aede43535782025d5689c49cf38d10ef5bdb1a301aec5ebd831602204a9f0bb7f0ed7c2e7c71bd3cfacc7b3990e7405946bad4346828b4228eb36890
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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