208.lsnc.net

Issued by R3

About this certificate

This digital certificate with serial number 03:98:d8:95:b2:89:02:27:e3:13:98:a5:21:ae:00:91:1d:a8 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=208.lsnc.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:98:d8:95:b2:89:02:27:e3:13:98:a5:21:ae:00:91:1d:a8
Serial Number (int): 313347668087708684809085348563307960802728
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 07:41:d2:1a:50:ba:84:10:8a:71:aa:8b:28:a7:ed:b9:86:fb:f5:3b
Fingerprint (sha256): 63:43:3a:bc:a4:51:54:d1:9e:03:6a:6a:6c:e3:93:4f:cc:4f:93:9a:68:a1:72:ed:19:19:cb:09:df:f1:90:78

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 208.lsnc.net

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 208.lsnc.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

208.lsnc.net
acadmintest.cuofco.org
achieve.engineering.asu.edu
act.mattek.com
admissions.kettering.edu
anniversaries.uahs.arizona.edu
appcamp.engineering.asu.edu
arch.utexas.edu
archive-mba.wharton.upenn.edu
asktico.lib.berkeley.edu
bigidea.rutgers.edu
bigtenandfriends.psu.edu
bridge.ucsb.edu
broadway.playhousesquare.org
business.ss.pacific.edu
campaign.ucsc.edu
census.arizona.edu
chancellorsearch.ucsc.edu
chat-rl.web.arizona.edu
cimes.csbs.csusb.edu
costume.library.cornell.edu
cqn-erc.arizona.edu
ctc.sfsu.edu
dev.business-services.upenn.edu
dev.finance.upenn.edu
dev.hcmorg-hierarchy.isc.upenn.edu
dev.iship.washington.edu
dev.law.georgetown.edu
dev1.si.umich.edu
developerdev.moodysanalytics.com
dmats.spcs.stanford.edu
dmats.stanford.edu
eeicfaculty.engineering.osu.edu
eis.washington.edu
elearning.med.utoronto.ca
esw.osu.edu
events-archive.ucsc.edu
exploringthecomplexity.ucdavis.edu
faculty.gsm.ucdavis.edu
furiposters.engineering.asu.edu
geniustransitchallenge.ny.gov
heckerlab.arizona.edu
hello.engineering.asu.edu
info.extension.ucsb.edu
investors.mgmgrowthproperties.com
itcatalyst.sfsu.edu
jsat.ucdavis.edu
kissingbug.arizona.edu
lambda.usc.edu
leap.ucdavis.edu
likenoother.tsm.edu
live-sas-strategic-plan.pantheon.sas.upenn.edu
live.ucdavis.edu
makinghistory.gwu.edu
missioncritical.wharton.upenn.edu
mtageniustransitchallenge.ny.gov
multidevcom.uaf.edu
nai.arizona.edu
nxterra.ucop.edu
odee-pgmo.osu.edu
oist.ucsb.edu
online.asu.edu
online.ece.udel.edu
online.foodsafety.msu.edu
online.iaals.du.edu
online.stkate.edu
ordbc.arizona.edu
osr-ops-test01.colorado.edu
partnership.gse.upenn.edu
pctc.washington.edu
peem.osu.edu
pmbasa.arizona.edu
production.id.ucsb.edu
radsafe.berkeley.edu
regenerativemedicine.uahs.arizona.edu
resx.usc.edu
rmp.rutgers.edu
saml4panth.ucdavis.edu
scanme-gradstudies.ucdavis.edu
scilsresx.rutgers.edu
smtp.asc.upenn.edu
stage.onlineeducation.psu.edu
staging.law.georgetown.edu
stanfordsummersession.stanford.edu
stg-blog.www.msit.io
techdigest.sagepub.com
test.cam.cornell.edu
test.cee.cornell.edu
test.eis.uw.edu
test.finance.upenn.edu
test.mae.cornell.edu
test.mse.cornell.edu
test.nittanyai.psu.edu
thrive.berklee.edu
tl.wvu.edu
trans.berkeley.edu
transportplan.rutgers.edu
ucdc.edu

Other certificates including the domain name lsnc.net

(limited to 100 certificates)
208.lsnc.net
208.lsnc.net
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
208.lsnc.net
208.lsnc.net
5657582312095744-fe3.pantheonsite.io
208.lsnc.net
sni70248.cloudflaressl.com
banking-business-review.com
208.lsnc.net
sni70248.cloudflaressl.com
208.lsnc.net
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com
5657582312095744-fe3.pantheonsite.io
208.lsnc.net
sni70248.cloudflaressl.com
208.lsnc.net
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
biopoliticaltimes.org
sni70248.cloudflaressl.com
208.lsnc.net
208.lsnc.net
sni70248.cloudflaressl.com
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
208.lsnc.net
5657582312095744-fe3.pantheonsite.io
lsnc.net
sni.cloudflaressl.com
sni70248.cloudflaressl.com
5657582312095744-fe3.pantheonsite.io
208.lsnc.net
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
biopoliticaltimes.org
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
208.lsnc.net
208.lsnc.net
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
208.lsnc.net
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
208.lsnc.net
sni70248.cloudflaressl.com
5657582312095744-fe3.pantheonsite.io
208.lsnc.net
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com
208.lsnc.net
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
208.lsnc.net
sni70248.cloudflaressl.com
sni.cloudflaressl.com
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
208.lsnc.net
208.lsnc.net
208.lsnc.net
208.lsnc.net
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com
sni70248.cloudflaressl.com
208.lsnc.net
208.lsnc.net
5657582312095744-fe3.pantheonsite.io
5657582312095744-fe3.pantheonsite.io
sni70248.cloudflaressl.com

Certificate

The complete raw certificate details for 208.lsnc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOMjCCDRqgAwIBAgISA5jYlbKJAifjE5ilIa4AkR2oMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjA2MTYyMTU1MzVaFw0yMjA5MTQyMTU1MzRaMBcxFTATBgNVBAMT
DDIwOC5sc25jLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANZK
yxomORzTPc9TPQeltlDYS3dlmXBOwG/CzHq62y+TmwCy59Di6eBCG1vMC8HHb3f8
VzJi0Zw+bR31yMeGxJMUTxCavwflJs9c49ZObtihSmUhhsTqNe8EZ8kiaAYBcNdi
6lFCFuVphH5osQhb+FgzeGjPlFYsGAahsNm0utN87ZtP7VljmsMcr6rbsj2L67DA
dGMk5mowr7N9SgeY+7BvUNbiobect8R12vwVghZWO//a7r1pahXIQw1Y5e/wSw1h
HhwUY9zykrcls/MTzA2Mn3HsxSfkWZDd6HNsyboOQfy3rZI23IPeLhBmysl7oPcv
w6IFVvAIpLHzH2oGwMUCAwEAAaOCC1swggtXMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUPJsXacm0uhAjQCM6azaFAmzTwdUwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA
5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu
by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w
ggkoBgNVHREEggkfMIIJG4IMMjA4LmxzbmMubmV0ghZhY2FkbWludGVzdC5jdW9m
Y28ub3JnghthY2hpZXZlLmVuZ2luZWVyaW5nLmFzdS5lZHWCDmFjdC5tYXR0ZWsu
Y29tghhhZG1pc3Npb25zLmtldHRlcmluZy5lZHWCHmFubml2ZXJzYXJpZXMudWFo
cy5hcml6b25hLmVkdYIbYXBwY2FtcC5lbmdpbmVlcmluZy5hc3UuZWR1gg9hcmNo
LnV0ZXhhcy5lZHWCHWFyY2hpdmUtbWJhLndoYXJ0b24udXBlbm4uZWR1ghhhc2t0
aWNvLmxpYi5iZXJrZWxleS5lZHWCE2JpZ2lkZWEucnV0Z2Vycy5lZHWCGGJpZ3Rl
bmFuZGZyaWVuZHMucHN1LmVkdYIPYnJpZGdlLnVjc2IuZWR1ghxicm9hZHdheS5w
bGF5aG91c2VzcXVhcmUub3JnghdidXNpbmVzcy5zcy5wYWNpZmljLmVkdYIRY2Ft
cGFpZ24udWNzYy5lZHWCEmNlbnN1cy5hcml6b25hLmVkdYIZY2hhbmNlbGxvcnNl
YXJjaC51Y3NjLmVkdYIXY2hhdC1ybC53ZWIuYXJpem9uYS5lZHWCFGNpbWVzLmNz
YnMuY3N1c2IuZWR1ghtjb3N0dW1lLmxpYnJhcnkuY29ybmVsbC5lZHWCE2Nxbi1l
cmMuYXJpem9uYS5lZHWCDGN0Yy5zZnN1LmVkdYIfZGV2LmJ1c2luZXNzLXNlcnZp
Y2VzLnVwZW5uLmVkdYIVZGV2LmZpbmFuY2UudXBlbm4uZWR1giJkZXYuaGNtb3Jn
LWhpZXJhcmNoeS5pc2MudXBlbm4uZWR1ghhkZXYuaXNoaXAud2FzaGluZ3Rvbi5l
ZHWCFmRldi5sYXcuZ2VvcmdldG93bi5lZHWCEWRldjEuc2kudW1pY2guZWR1giBk
ZXZlbG9wZXJkZXYubW9vZHlzYW5hbHl0aWNzLmNvbYIXZG1hdHMuc3Bjcy5zdGFu
Zm9yZC5lZHWCEmRtYXRzLnN0YW5mb3JkLmVkdYIfZWVpY2ZhY3VsdHkuZW5naW5l
ZXJpbmcub3N1LmVkdYISZWlzLndhc2hpbmd0b24uZWR1ghllbGVhcm5pbmcubWVk
LnV0b3JvbnRvLmNhggtlc3cub3N1LmVkdYIXZXZlbnRzLWFyY2hpdmUudWNzYy5l
ZHWCImV4cGxvcmluZ3RoZWNvbXBsZXhpdHkudWNkYXZpcy5lZHWCF2ZhY3VsdHku
Z3NtLnVjZGF2aXMuZWR1gh9mdXJpcG9zdGVycy5lbmdpbmVlcmluZy5hc3UuZWR1
gh1nZW5pdXN0cmFuc2l0Y2hhbGxlbmdlLm55LmdvdoIVaGVja2VybGFiLmFyaXpv
bmEuZWR1ghloZWxsby5lbmdpbmVlcmluZy5hc3UuZWR1ghdpbmZvLmV4dGVuc2lv
bi51Y3NiLmVkdYIhaW52ZXN0b3JzLm1nbWdyb3d0aHByb3BlcnRpZXMuY29tghNp
dGNhdGFseXN0LnNmc3UuZWR1ghBqc2F0LnVjZGF2aXMuZWR1ghZraXNzaW5nYnVn
LmFyaXpvbmEuZWR1gg5sYW1iZGEudXNjLmVkdYIQbGVhcC51Y2RhdmlzLmVkdYIT
bGlrZW5vb3RoZXIudHNtLmVkdYIubGl2ZS1zYXMtc3RyYXRlZ2ljLXBsYW4ucGFu
dGhlb24uc2FzLnVwZW5uLmVkdYIQbGl2ZS51Y2RhdmlzLmVkdYIVbWFraW5naGlz
dG9yeS5nd3UuZWR1giFtaXNzaW9uY3JpdGljYWwud2hhcnRvbi51cGVubi5lZHWC
IG10YWdlbml1c3RyYW5zaXRjaGFsbGVuZ2UubnkuZ292ghNtdWx0aWRldmNvbS51
YWYuZWR1gg9uYWkuYXJpem9uYS5lZHWCEG54dGVycmEudWNvcC5lZHWCEW9kZWUt
cGdtby5vc3UuZWR1gg1vaXN0LnVjc2IuZWR1gg5vbmxpbmUuYXN1LmVkdYITb25s
aW5lLmVjZS51ZGVsLmVkdYIZb25saW5lLmZvb2RzYWZldHkubXN1LmVkdYITb25s
aW5lLmlhYWxzLmR1LmVkdYIRb25saW5lLnN0a2F0ZS5lZHWCEW9yZGJjLmFyaXpv
bmEuZWR1ghtvc3Itb3BzLXRlc3QwMS5jb2xvcmFkby5lZHWCGXBhcnRuZXJzaGlw
LmdzZS51cGVubi5lZHWCE3BjdGMud2FzaGluZ3Rvbi5lZHWCDHBlZW0ub3N1LmVk
dYIScG1iYXNhLmFyaXpvbmEuZWR1ghZwcm9kdWN0aW9uLmlkLnVjc2IuZWR1ghRy
YWRzYWZlLmJlcmtlbGV5LmVkdYIlcmVnZW5lcmF0aXZlbWVkaWNpbmUudWFocy5h
cml6b25hLmVkdYIMcmVzeC51c2MuZWR1gg9ybXAucnV0Z2Vycy5lZHWCFnNhbWw0
cGFudGgudWNkYXZpcy5lZHWCHnNjYW5tZS1ncmFkc3R1ZGllcy51Y2RhdmlzLmVk
dYIVc2NpbHNyZXN4LnJ1dGdlcnMuZWR1ghJzbXRwLmFzYy51cGVubi5lZHWCHXN0
YWdlLm9ubGluZWVkdWNhdGlvbi5wc3UuZWR1ghpzdGFnaW5nLmxhdy5nZW9yZ2V0
b3duLmVkdYIic3RhbmZvcmRzdW1tZXJzZXNzaW9uLnN0YW5mb3JkLmVkdYIUc3Rn
LWJsb2cud3d3Lm1zaXQuaW+CFnRlY2hkaWdlc3Quc2FnZXB1Yi5jb22CFHRlc3Qu
Y2FtLmNvcm5lbGwuZWR1ghR0ZXN0LmNlZS5jb3JuZWxsLmVkdYIPdGVzdC5laXMu
dXcuZWR1ghZ0ZXN0LmZpbmFuY2UudXBlbm4uZWR1ghR0ZXN0Lm1hZS5jb3JuZWxs
LmVkdYIUdGVzdC5tc2UuY29ybmVsbC5lZHWCFnRlc3Qubml0dGFueWFpLnBzdS5l
ZHWCEnRocml2ZS5iZXJrbGVlLmVkdYIKdGwud3Z1LmVkdYISdHJhbnMuYmVya2Vs
ZXkuZWR1ghl0cmFuc3BvcnRwbGFuLnJ1dGdlcnMuZWR1ggh1Y2RjLmVkdTBMBgNV
HSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpo
dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA
8QB3AN+lXqtogk8fbK3uuF9OPlrqzaISpGpejjsSwCBEXCpzAAABgW66qrAAAAQD
AEgwRgIhAPdOSNA/e0Lrvywc9k+n8MJpHt2J8Mwxw/IY7j1kdYxpAiEAm1QgvYSc
qmwqea/V2g0P3wHlZ7g4IbnHdiWHx0yK048AdgApeb7wnjk5IfBWc59jpXflvld9
nGAK+PlNXSZcJV3HhAAAAYFuuqqlAAAEAwBHMEUCIHR1EoEW4QfwdvL8N3k2otMJ
TbIcZH4mJKep4OyduEvpAiEA87QNsaV6ea/gCyPabLLd/umTMBglNTt/DADXSDL8
pc0wDQYJKoZIhvcNAQELBQADggEBALFYC0XD5/gsRWTgrC3LnvA7QkyUht1SZec1
XABGioPh/Sg9qCP7zidDPZSyxhYoxnJZj/R2lB895oK3MfBjbyKESZGyb36sKLyA
BMmzwQVtAW4+yEBVUtGRCG36jj7EmevaZofs7dUIVEdICjKQt/nz0S+KaoCednlJ
9RG7TwcjJTc3LDV2+5VNkwMIl1ACLTq+OEMuDLpz2FdvD5SQ7lbbK8sWvok6MzKx
Lam9L4dlF5E6H/JJKf4TzPpIJk7vOOlvIzMOXSIfGn1UdLX7eEmqINFdxDfTSIUL
30MWzbjfPKKBbvqXnz4C17OkRULDi5UOSFMa+mqcumL+Tv6G3UQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313347668087708684809085348563307960802728
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-16 21:55:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-14 21:55:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '208.lsnc.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2335 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '208.lsnc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acadmintest.cuofco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achieve.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.mattek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admissions.kettering.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anniversaries.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appcamp.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arch.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive-mba.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asktico.lib.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigidea.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigtenandfriends.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadway.playhousesquare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'census.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chancellorsearch.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat-rl.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimes.csbs.csusb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costume.library.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cqn-erc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctc.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.business-services.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.finance.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.hcmorg-hierarchy.isc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.iship.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.law.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.si.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developerdev.moodysanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.spcs.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eeicfaculty.engineering.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eis.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearning.med.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esw.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events-archive.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploringthecomplexity.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faculty.gsm.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furiposters.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniustransitchallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heckerlab.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.extension.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors.mgmgrowthproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcatalyst.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsat.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kissingbug.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambda.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leap.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'likenoother.tsm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-sas-strategic-plan.pantheon.sas.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missioncritical.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtageniustransitchallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nai.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nxterra.ucop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odee-pgmo.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oist.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.ece.udel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.foodsafety.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.iaals.du.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.stkate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordbc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osr-ops-test01.colorado.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnership.gse.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pctc.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peem.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmbasa.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.id.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsafe.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regenerativemedicine.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmp.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saml4panth.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scanme-gradstudies.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scilsresx.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.asc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.law.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanfordsummersession.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-blog.www.msit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techdigest.sagepub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cee.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.eis.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.finance.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.nittanyai.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thrive.berklee.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tl.wvu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trans.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transportplan.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucdc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001816ebaaab00000040300483046022100f74e48d03f7b42ebbf2c1cf64fa7f0c2691edd89f0cc31c3f218ee3d64758c690221009b5420bd849caa6c2a79afd5da0d0fdf01e567b83821b9c7762587c74c8ad38f0076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001816ebaaaa5000004030047304502207475128116e107f076f2fc377936a2d3094db21c647e2624a7a9e0ec9db84be9022100f3b40db1a57a79afe00b23da6cb2ddfee993301825353b7f0c00d74832fca5cd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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