brainweek.dana.org

Issued by R3

About this certificate

This digital certificate with serial number 04:32:6a:6f:2e:f1:d7:33:5e:3d:d4:bc:55:59:90:11:c4:78 was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=brainweek.dana.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:32:6a:6f:2e:f1:d7:33:5e:3d:d4:bc:55:59:90:11:c4:78
Serial Number (int): 365604737537743838519344863212000460784760
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c5:f0:d2:68:73:bb:5c:f8:11:49:df:79:dc:09:20:33:06:93:02:e4
Fingerprint (sha256): 63:4f:23:cd:16:1a:93:c9:76:3a:a4:db:ac:97:19:47:ba:1b:d4:97:75:fa:6f:66:52:39:ff:43:be:f1:6e:1f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate brainweek.dana.org

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brainweek.dana.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brainweek.dana.org
brianpellot.religionnews.com
bridge.ucsb.edu
britainelects.newstatesman.com
broadway.playhousesquare.org
business.ss.pacific.edu
buyersguide.aaps.org
cal.test.flwright.org
caldesignlab.berkeley.edu
calendar.sdzsafaripark.org
california.catholicreview.org
caminosseguros.iadb.org
campaign.ucsc.edu
campusportal.arizona.edu
cardinalapartments.stanford.edu
careers.whittier.edu
carpepm.almonds.com
cci520-new.courtinnovation.org
cdi.uga.edu
cdn-origin.commonsensemedia.org
cdn-test.battlefields.org
cen-stage.hosting.cornell.edu
census.arizona.edu
cetys.udesa.edu.ar
charon.sreb.org
chat-rl.web.arizona.edu
chem674.multidevcom.uaf.edu
citeak.multidevcom.uaf.edu
civ.ctd.northwestern.edu
clc.shawnee.edu
cleanmedia.americamagazine.org
client.pfannenbergusa.com
clinicalpolicy.hsj.co.uk
cloudapp-eu.appcelerator.com
cloudapp-whale-sim.appcelerator.com
cloudapp.appcelerator.com
cloudapp.tui.appcelerator.com
club.kjzz.org
cmmb-portal.cmmb.org
cms.legacy.com
cn.oceana.org
coins.rutgers.edu
covid.usmle.org
cqn-erc.arizona.edu
crmtest.eastdunbarton.gov.uk
cs.cs.berkeley.edu
csc.arizona.edu
d7.cmc.edu
d7store.juilliard.edu
dc.neilkelly.com
dea.action.drugpolicy.org
debate2016.wustl.edu
demeter.bavc.org
demo.govdelivery.com
dev-camdenbase.libraries.rutgers.edu
dev-cancerforum.hsj.co.uk
dev-covid19.chop.edu
dev-integratedcare.hsj.co.uk
dev-lp-jhubsph.edu.help
dev-mentalhealth.hsj.co.uk
dev-provider.hsj.co.uk
dev-web-degacc.edu.help
dev-web-jhucareycoop.edu.help
dev.business-services.upenn.edu
dev.cee.cornell.edu
dev.champions-speakers.co.uk
dev.courtinnovation.org
dev.cpra.cornell.edu
dev.ctd.northwestern.edu
dev.ece.cornell.edu
dev.efc.ny.gov
dev.engineering.cornell.edu
dev.farmjournalagtech.com
dev.hcmorg-hierarchy.isc.upenn.edu
dev.health.universityofcalifornia.edu
dev.law.georgetown.edu
dev.mae.cornell.edu
dev.mcny.org
dev.mse.cornell.edu
dev.nebrwesleyan.edu
dev.netimpact.org
dev.onlineeducation.psu.edu
dev.shibtest7.isc.upenn.edu
dev1.engineering.ucsb.edu

Other certificates including the domain name dana.org

(limited to 100 certificates)
it.uahs.arizona.edu
streetfilms.org
www.design-engineering.princeton.edu
nxterra.ucop.edu
banking-business-review.com
www.blogs.earthjustice.org
www.dana.org
webdev.colorado.edu
virtual2.unlv.edu
hub.meed.com
www.dana.org
streetfilms.org
good.gsm.cornell.edu
nistmep.blogs.govdelivery.com
host2.openminds.com
local3599.com
www.esc.rutgers.edu
communityadvancementfirm.com
www.bodywerks-medspa.com
www.extension.ucdavis.edu
inside.gc.cuny.edu
5630742793027584-fe4.pantheonsite.io
nartc.fcm.arizona.edu
abong.ufcespanol.com
vpn.dana.org
5630742793027584-fe4.pantheonsite.io
banking-business-review.com
*.dana.org
nyexchange.dana.org
161511-web1.vilcek.org
www.dana.org
161511-web1.vilcek.org
asikmpo.discoverlosangeles.com
161511-web1.vilcek.org
international.dev.oceana.org
www.advising.arizona.edu
admission.gsm.cornell.edu
161511-web1.vilcek.org
*.dana.org
www.apac.arizona.edu
junk.dana.org
brainawarenessweek.org
afscme57.org
2fsupport.govdelivery.com
nxterra.ucop.edu
www.nartc.fcm.arizona.edu
161511-web1.vilcek.org
aaupnet.org
alldata.com
banking-business-review.com
sters.us
5630742793027584-fe4.pantheonsite.io
alldata.com
wireless.unlv.edu
deanbphilips.com
deanbphilips.com
hepwebstudy.org
intranet.olivecrest.org
banking-business-review.com
deanbphilips.com
streetfilms.org
streetfilms.org
161511-web1.vilcek.org
agenslotgacor.gsm.cornell.edu
dana.org
streetfilms.org
alldata.com
scilsresx.rutgers.edu
abong.ufcespanol.com
internal.gcir.org
junk.dana.org
2020.sundialsolarenergy.com
www.cbs.asu.edu
cerebrum.dana.org
www.inas2.uga.edu
advance.cccu.org
projectshare.sfsu.edu
161511-web1.vilcek.org
banking-business-review.com
www.eventsinfo.presidio.edu
banking-business-review.com
international.research.ucsb.edu
online.asu.edu
5-bdrtglrsmitrpcya.centricconsulting.com
ordbc.arizona.edu
alldata.com
international.research.ucsb.edu
www.archydro.crwr.utexas.edu
on.dana.org
161511-web1.vilcek.org
banking-business-review.com
2021convention.ncte.org
aaupnet.org
radsafe.berkeley.edu
161511-web1.vilcek.org
seotest.clorox.com
5630742793027584-fe4.pantheonsite.io
junk.dana.org
2fwww.govdelivery.com
www.acims.arizona.edu

Certificate

The complete raw certificate details for brainweek.dana.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365604737537743838519344863212000460784760
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-26 07:49:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 07:49:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brainweek.dana.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2078 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainweek.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brianpellot.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'britainelects.newstatesman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadway.playhousesquare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyersguide.aaps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cal.test.flwright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caldesignlab.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calendar.sdzsafaripark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'california.catholicreview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caminosseguros.iadb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusportal.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalapartments.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.whittier.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carpepm.almonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cci520-new.courtinnovation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdi.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-origin.commonsensemedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-test.battlefields.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cen-stage.hosting.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'census.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetys.udesa.edu.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charon.sreb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat-rl.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chem674.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citeak.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civ.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clc.shawnee.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanmedia.americamagazine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.pfannenbergusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicalpolicy.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudapp-eu.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudapp-whale-sim.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudapp.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudapp.tui.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'club.kjzz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmmb-portal.cmmb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.legacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coins.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid.usmle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cqn-erc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmtest.eastdunbarton.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.cs.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd7.cmc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd7store.juilliard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.neilkelly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dea.action.drugpolicy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debate2016.wustl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demeter.bavc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-camdenbase.libraries.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-cancerforum.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-covid19.chop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-integratedcare.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-lp-jhubsph.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-mentalhealth.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-provider.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-web-degacc.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-web-jhucareycoop.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.business-services.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cee.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.champions-speakers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.courtinnovation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cpra.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ece.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.efc.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.engineering.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.farmjournalagtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.hcmorg-hierarchy.isc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.health.universityofcalifornia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.law.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.netimpact.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.shibtest7.isc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.engineering.ucsb.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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