1.govdelivery.com

Issued by R3

About this certificate

This digital certificate with serial number 04:4f:ef:2d:b6:e6:59:42:30:52:78:69:67:05:5b:2d:45:0a was issued on by Let's Encrypt.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=1.govdelivery.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4f:ef:2d:b6:e6:59:42:30:52:78:69:67:05:5b:2d:45:0a
Serial Number (int): 375649373567795003587027395609755994899722
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2d:41:c6:6a:c2:33:9b:c8:9b:7d:2c:f8:97:df:67:1c:90:2b:7b:f0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 45:13:d5:95:f3:2d:a4:a6:b6:b6:e7:dd:32:5d:83:1f:1a:bd:19:ee
Fingerprint (sha256): 61:e2:67:f9:23:89:cf:ba:44:fa:cc:6b:9a:70:23:5e:62:ca:0f:17:f1:ff:0b:2b:37:60:46:44:e3:87:62:55

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 1.govdelivery.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 1.govdelivery.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1.govdelivery.com
252fwww.doctorswithoutborders.org
2d252fcontent.govdelivery.com
a-filer-records.hosting.cornell.edu
ab.msbonline.georgetown.edu.help
accreditation.gatewaycc.edu
afbc-submission.banking.unsw.edu.au
aggievote.ucdavis.edu
arabsinamerica.unc.edu
blog.teachingandlearning.unc.edu
bmeclub.bme.ncsu.edu
bostoto.rockhurst.edu
btgmrh.religionnews.com
carolinabond.unc.edu
carolinamxlescholars.unc.edu
catalog.antiochsb.edu
ccblog.ashevillenc.gov
ccli.unc.edu
changealife.rmu.edu
chilebase.oceana.org
cinemadigitalmedia.ucdavis.edu
civics.unc.edu
commonground.usc.edu
cors.jsums.edu
datacenter.isdi.education
datacenter.religionnews.com
dev.aep.cornell.edu
dev.bog.georgetown.edu
dev.erdf.appcelerator.com
dev.newsbusters.org
dev.ophd.pantheon.berkeley.edu
developers-new.nwea.org
domainkey.religionnews.com
emergingtech.newstatesman.com
fms.umd.edu
food.dev.oceana.org
freeorder.dev.oceana.org
geniuschallenge.ny.gov
geo.nysenate.gov
heal.ucdavis.edu
herb.bastyr.edu
hooverlab.engineering.asu.edu
hr.ahsc.arizona.edu
hub.uahs.arizona.edu
humantrafficking.unc.edu
instructional-continuity.id.ucsb.edu
intelligence.coronavirus.wa.gov
intldev.oceana.org
jangan.religionnews.com
jc.edu
jcsu.edu
jobs.rainscapes.com
lactation.sfsu.edu
live-ua-chandler.pantheonsite.io
live.haas-executive.pantheon.berkeley.edu
livecntest.ppld.org
lsee.humboldt.edu
mail.as-coa.org
mediasandbox.cas.msu.edu
meridian-180.eforums.cornell.edu
mrc.vermont.gov
new.atr.org
onlineradiologydegree.adu.edu
onq.kqed.org
pentest.web.arizona.edu
phyloloab.test.franklinresearch.uga.edu
pr-377.pantheon-multidev.ufc.com
psp.sandiegozoowildlifealliance.org
pubsafeweb.rutgers.edu
pubtogel-takingmeasure.blogs.govdelivery.com
qe.uchicago.edu
sbobet.sites.intg.voya.com
sbsm.dev.oceana.org
sciville.scitent.us
ssp.dce.harvard.edu
staging.law.georgetown.edu
staging.mrctv.org
tai-rds.braggcrane.com
telemicroscopy.berkeley.edu

Other certificates including the domain name govdelivery.com

(limited to 100 certificates)
carpepm.almonds.com
it.uahs.arizona.edu
statuspage.io
subscriberhelp.govdelivery.com
nartc.fcm.arizona.edu
calendar.sdzsafaripark.org
3fadmin.govdelivery.com
statuspage.io
streetfilms.org
5715161717407744-fe2.pantheonsite.io
banking-business-review.com
cdn-test.battlefields.org
5742636757417984-fe1.pantheonsite.io
5638203017003008-fe2.pantheonsite.io
eu1-status.mulesoft.com
chns120.courseresource.yale.edu
5715161717407744-fe2.pantheonsite.io
208.lsnc.net
banking-business-review.com
5649952705347584-fe1.pantheonsite.io
govde-cm01.govdelivery.com
hub.meed.com
208.lsnc.net
yakamafish-star.net
eu1-status.mulesoft.com
dev.wellness.yale.edu
info-dev.calperformances.org
5699714196439040-fe2.pantheonsite.io
streetfilms.org
good.gsm.cornell.edu
5645056174194688-fe3.pantheonsite.io
nistmep.blogs.govdelivery.com
5718016125829120-fe1.pantheonsite.io
dev.embody.yale.edu
govdelivery.co.uk
expeditions.sandiegozoo.org
eu1-status.mulesoft.com
club.kjzz.org
statuspage.io
5729201025974272-fe1.pantheonsite.io
dev.wellness.yale.edu
statuspage.io
statuspage.io
academi.ufc.com
5645056174194688-fe3.pantheonsite.io
host2.openminds.com
local3599.com
5715161717407744-fe2.pantheonsite.io
communityadvancementfirm.com
208.lsnc.net
api.govdelivery.com
5718016125829120-fe1.pantheonsite.io
5699714196439040-fe2.pantheonsite.io
5742636757417984-fe1.pantheonsite.io
5649952705347584-fe1.pantheonsite.io
208.lsnc.net
statuspage.io
*.govdelivery.com
5729201025974272-fe1.pantheonsite.io
vpn-prod.granicus.com
5742636757417984-fe1.pantheonsite.io
5718016125829120-fe1.pantheonsite.io
alumnimail.albion.edu
5645056174194688-fe3.pantheonsite.io
5638203017003008-fe2.pantheonsite.io
*.blogs.govdelivery.com
2fadmin.govdelivery.com
corporatestatus.tyro.com
5638203017003008-fe2.pantheonsite.io
status.govdelivery.com
5699714196439040-fe2.pantheonsite.io
5729201025974272-fe1.pantheonsite.io
about.govdelivery.com
5638203017003008-fe2.pantheonsite.io
banking-business-review.com
inside.gc.cuny.edu
5659118702428160-fe2.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5699714196439040-fe2.pantheonsite.io
nartc.fcm.arizona.edu
eu1-status.mulesoft.com
content.govdelivery.com
statuspage.io
connect.iadb.org
abong.ufcespanol.com
origin-content.govdelivery.com
5715161717407744-fe2.pantheonsite.io
5729201025974272-fe1.pantheonsite.io
statuspage.io
5746664899870720-fe3.pantheonsite.io
statuspage.io
5715161717407744-fe2.pantheonsite.io
eu1-status.mulesoft.com
statuspage.io
5649952705347584-fe1.pantheonsite.io
5729201025974272-fe1.pantheonsite.io
acadmintest.cuofco.org
5718016125829120-fe1.pantheonsite.io
5742636757417984-fe1.pantheonsite.io

Certificate

The complete raw certificate details for 1.govdelivery.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JN61R0OEToyc9CIab1N
fFPve9HGDGrKGYI2xIZDj1g0/YpVvHizoPQmjkhcgffw0DLtIcdqKmZwWURQkKdA
P22GGARM8LLaHTGj2/AzuU5CZGNEMPcva3YNWgQk9hY+0unXuv/T4vdgT/3FbwuH
7XVLuu4g+czlbMzruU+Yy54s1vyp1W4/NraAq8T9qVUYBLtp1Uvzw2vJ4MQIXdae
NRvgRqXWpRHggyeaD/2DrO1wXAB4YY+sTuLY/Exugh8G057soGHwiQNa6myP6enc
wLAmWU0lp3ebW91iAj5jD5qhwJCSp6xNbr10ujDrq/YKK0BUm9dFH31bmQB68DQk
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375649373567795003587027395609755994899722
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-02 00:13:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-31 00:13:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1.govdelivery.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30874871418674330599856582475032938667375268619443001630863980336265595132255055319191643458111097912849518683644418268103987213994455977559607858848119842980533392049063729003920357542074988987461137585846020662431659934377838370289619002655875385799518291331039036698807426681817568646147255938646103126008097680224992782780625624378043298116774876838353123724342507002380006971784078794529182989372683470709944523843444459913842097363110245276310289984800758291731507727636966622104526315616493280025870076217545288249244971934789372294783507838417764757756356243493322858302549568740438214483485562672125977044153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d41c66ac2339bc89b7d2cf897df671c902b7bf0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1980 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '252fwww.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2d252fcontent.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-filer-records.hosting.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ab.msbonline.georgetown.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accreditation.gatewaycc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afbc-submission.banking.unsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggievote.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arabsinamerica.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.teachingandlearning.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmeclub.bme.ncsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bostoto.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btgmrh.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolinabond.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolinamxlescholars.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.antiochsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccblog.ashevillenc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccli.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changealife.rmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chilebase.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinemadigitalmedia.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civics.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commonground.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cors.jsums.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datacenter.isdi.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datacenter.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bog.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.erdf.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.newsbusters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers-new.nwea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainkey.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergingtech.newstatesman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeorder.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniuschallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geo.nysenate.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heal.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herb.bastyr.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hooverlab.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.ahsc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humantrafficking.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instructional-continuity.id.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligence.coronavirus.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intldev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jangan.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.rainscapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lactation.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-ua-chandler.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.haas-executive.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livecntest.ppld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsee.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediasandbox.cas.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meridian-180.eforums.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrc.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.atr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineradiologydegree.adu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onq.kqed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pentest.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phyloloab.test.franklinresearch.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr-377.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psp.sandiegozoowildlifealliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubsafeweb.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubtogel-takingmeasure.blogs.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qe.uchicago.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbobet.sites.intg.voya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbsm.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciville.scitent.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssp.dce.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.law.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mrctv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tai-rds.braggcrane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telemicroscopy.berkeley.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187da05a68e00000403004730450221009b736f7a8180ef60a521a60269f0694cc5fae769e6b1f7a3987359b31c65b4c402201631504e1feed568e04de7fc50980a71d140481187c85a62dc7c3c924a2f91450076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187da05a69d00000403004730450220758f00f7fd28ae083c0f1d9ce6b8c4a9b75ede317e735d01bb8763250b9f04b0022100f628b18481bd280bea81c3777b57c0c4da4fdec251d2a2076ed8e4b2d10138ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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