covid.usmle.org

Issued by R3

About this certificate

This digital certificate with serial number 04:80:03:fc:4f:98:80:ad:59:bc:52:27:b5:7c:de:c5:1e:d2 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=covid.usmle.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:80:03:fc:4f:98:80:ad:59:bc:52:27:b5:7c:de:c5:1e:d2
Serial Number (int): 392010584450109678473827241934387251846866
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 00:f8:0d:0d:e9:fe:c6:5a:53:ab:93:7a:f8:d1:46:76:c8:8c:c4:d5
Fingerprint (sha256): 64:65:43:6b:2b:37:3d:47:68:9b:10:32:cc:3d:21:e0:f1:3a:09:99:bb:c8:0c:30:b4:a5:f2:c2:28:04:53:fa

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate covid.usmle.org

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for covid.usmle.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

covid.usmle.org
cqn-erc.arizona.edu
crmtest.eastdunbarton.gov.uk
csc.arizona.edu
d7.cmc.edu
d7store.juilliard.edu
design-engineering.princeton.edu
dev-camdenbase.libraries.rutgers.edu
dev-covid19.chop.edu
dev-lp-jhubsph.edu.help
dev-web-degacc.edu.help
dev-web-jhucareycoop.edu.help
dev-www2.ofx.com
dev.business-services.upenn.edu
dev.cee.cornell.edu
dev.champions-speakers.co.uk
dev.ctd.northwestern.edu
dev.dhsri.yale.edu
dev.ece.cornell.edu
dev.embody.yale.edu
dev.engineering.cornell.edu
dev.mae.cornell.edu
dev.mse.cornell.edu
dev.nebrwesleyan.edu
dev.onlineeducation.psu.edu
dev.shibtest7.isc.upenn.edu
dev.wrightlaboratory.yale.edu
dev.wti.yale.edu
dev1.engineering.ucsb.edu
dev1.si.umich.edu
devdr.azmex.arizona.edu
dial.sralab.org
dlpe.calc.gatech.edu
dmats.spcs.stanford.edu
dmats.stanford.edu
ds.arizona.edu
ebot200.multidevcom.uaf.edu
ecalso.berkeley.edu
ecc.nacha.org
education.ss.pacific.edu
ehs.sph.berkeley.edu
eis.dev.cms1.asa.uw.edu
embody.yale.edu
engaginghumanities.ucsb.edu
engineering.ss.pacific.edu
environment.research.yale.edu
expeditions.sandiegozoo.org
explore.hunterbusinessschool.edu
exploringthecomplexity.ucdavis.edu
faculty.gsm.ucdavis.edu
fecc.nacha.org
flta.cli.asu.edu
gem.business.ucdenver.edu
get.pima.edu
giftcertificates.cookbookcooks.com
gil.engineering.asu.edu
gis.archbalt.org
giveto.shawnee.edu
gpf.nacha.org
gsefilms.gse.upenn.edu
gtpe.pe.gatech.edu
hcii.cs.cmu.edu
healthed.sfsu.edu
healthsciences.ss.pacific.edu
host2.openminds.com
host3.cenmi.org
host90.farmermac.com
hr-kiosk.tsu.edu
igert.ucsb.edu
india-test.generation.org
industri40.ida.dk
info-dev.calperformances.org
info.religionnews.com
info.vcfa.edu
infonet.fia.org
inks.govdelivery.com
inside.gc.cuny.edu
inside.kjzz.org
internal.gcir.org
international.research.ucsb.edu
internetcouncil.nacha.org
intranet.olivecrest.org
ipv6.earthjustice.org
it-chat.web.arizona.edu
it.22squared.com
it.uahs.arizona.edu
itcatalyst.sfsu.edu
iteachu.multidevcom.uaf.edu
journaldev.naeyc.org
jwplayer.essence.com
kim.lovelace.shiatsusociety.org
kissingbug.arizona.edu
kubernetes.govdelivery.com
labellelab.asu.edu
lambda.usc.edu
landing.pacific.edu
law.ss.pacific.edu
ldap.cscc.unc.edu
legacy.bricartsmedia.org

Other certificates including the domain name usmle.org

(limited to 100 certificates)
carpepm.almonds.com
calendar.sdzsafaripark.org
cdn-test.battlefields.org
citeak.multidevcom.uaf.edu
chns120.courseresource.yale.edu
banking-business-review.com
chns168.courseresource.yale.edu
club.kjzz.org
connect.iadb.org
brassunion.com
chns168.courseresource.yale.edu
buyersguide.aaps.org
cdi.uga.edu
citeak.multidevcom.uaf.edu
chns168.courseresource.yale.edu
caldesignlab.berkeley.edu
covid.usmle.org
careers.whittier.edu
chns130.courseresource.yale.edu
cms.legacy.com
live-legacy-cms.pantheonsite.io
citrix.remote.naylor.com
2.www.upenn.edu
banking-business-review.com
clc.shawnee.edu
chns150.courseresource.yale.edu
160.167.tmcapital.com
cci520-new.courtinnovation.org
cci520-new.courtinnovation.org
campaign.ucsc.edu
chns130.courseresource.yale.edu
caldesignlab.berkeley.edu
census.arizona.edu
chns168.courseresource.yale.edu
thepointalehouse.com
banking-business-review.com
usmle.org
thepointalehouse.com
connect.iadb.org
www.usmle.org
chem674.multidevcom.uaf.edu
citeak.multidevcom.uaf.edu
hamiltonexhibition.com
chem674.multidevcom.uaf.edu
coins.rutgers.edu
banking-business-review.com
thepointalehouse.com
banking-business-review.com
citeak.multidevcom.uaf.edu
chem674.multidevcom.uaf.edu
carpepm.almonds.com
wptblog.org
chem674.multidevcom.uaf.edu
calendar.sdzsafaripark.org
caminosseguros.iadb.org
chns168.courseresource.yale.edu
connect.iadb.org
calendar.sdzsafaripark.org
chem674.multidevcom.uaf.edu
citeak.multidevcom.uaf.edu
boxoffice.mcny.org
campaign.ucsc.edu
careers.whittier.edu
banking-business-review.com
2.www.upenn.edu
caldesignlab.berkeley.edu
caminosseguros.iadb.org
caminosseguros.iadb.org
census.arizona.edu
cmmb-portal.cmmb.org
160.167.tmcapital.com
usmle.org
citeak.multidevcom.uaf.edu
citeak.multidevcom.uaf.edu
floridahospitalcancer.com
charon.sreb.org
chns150.courseresource.yale.edu
calendar.sdzsafaripark.org
connect.iadb.org
campaign.ucsc.edu
chns130.courseresource.yale.edu
chns150.courseresource.yale.edu
chns120.courseresource.yale.edu
covid.usmle.org
usmle.org
cetys.udesa.edu.ar
caminosseguros.iadb.org
banking-business-review.com
cloudapp.appcelerator.com
careers.whittier.edu
brainweek.dana.org
chns150.courseresource.yale.edu
covid.usmle.org
160.167.tmcapital.com
connect.iadb.org
floridahospitalcancer.com
banking-business-review.com
cci520-new.courtinnovation.org
boztchividjian.religionnews.com
chns168.courseresource.yale.edu

Certificate

The complete raw certificate details for covid.usmle.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINITCCDAmgAwIBAgISBIAD/E+YgK1ZvFIntXzexR7SMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjEwMTMxOTMzNDRaFw0yMzAxMTExOTMzNDNaMBoxGDAWBgNVBAMT
D2NvdmlkLnVzbWxlLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANZKyxomORzTPc9TPQeltlDYS3dlmXBOwG/CzHq62y+TmwCy59Di6eBCG1vMC8HH
b3f8VzJi0Zw+bR31yMeGxJMUTxCavwflJs9c49ZObtihSmUhhsTqNe8EZ8kiaAYB
cNdi6lFCFuVphH5osQhb+FgzeGjPlFYsGAahsNm0utN87ZtP7VljmsMcr6rbsj2L
67DAdGMk5mowr7N9SgeY+7BvUNbiobect8R12vwVghZWO//a7r1pahXIQw1Y5e/w
Sw1hHhwUY9zykrcls/MTzA2Mn3HsxSfkWZDd6HNsyboOQfy3rZI23IPeLhBmysl7
oPcvw6IFVvAIpLHzH2oGwMUCAwEAAaOCCkcwggpDMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUPJsXacm0uhAjQCM6azaFAmzTwdUwHwYDVR0jBBgwFoAUFC6zF7dYVsuu
UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v
cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y
Zy8wggkIBgNVHREEggj/MIII+4IPY292aWQudXNtbGUub3JnghNjcW4tZXJjLmFy
aXpvbmEuZWR1ghxjcm10ZXN0LmVhc3RkdW5iYXJ0b24uZ292LnVrgg9jc2MuYXJp
em9uYS5lZHWCCmQ3LmNtYy5lZHWCFWQ3c3RvcmUuanVpbGxpYXJkLmVkdYIgZGVz
aWduLWVuZ2luZWVyaW5nLnByaW5jZXRvbi5lZHWCJGRldi1jYW1kZW5iYXNlLmxp
YnJhcmllcy5ydXRnZXJzLmVkdYIUZGV2LWNvdmlkMTkuY2hvcC5lZHWCF2Rldi1s
cC1qaHVic3BoLmVkdS5oZWxwghdkZXYtd2ViLWRlZ2FjYy5lZHUuaGVscIIdZGV2
LXdlYi1qaHVjYXJleWNvb3AuZWR1LmhlbHCCEGRldi13d3cyLm9meC5jb22CH2Rl
di5idXNpbmVzcy1zZXJ2aWNlcy51cGVubi5lZHWCE2Rldi5jZWUuY29ybmVsbC5l
ZHWCHGRldi5jaGFtcGlvbnMtc3BlYWtlcnMuY28udWuCGGRldi5jdGQubm9ydGh3
ZXN0ZXJuLmVkdYISZGV2LmRoc3JpLnlhbGUuZWR1ghNkZXYuZWNlLmNvcm5lbGwu
ZWR1ghNkZXYuZW1ib2R5LnlhbGUuZWR1ghtkZXYuZW5naW5lZXJpbmcuY29ybmVs
bC5lZHWCE2Rldi5tYWUuY29ybmVsbC5lZHWCE2Rldi5tc2UuY29ybmVsbC5lZHWC
FGRldi5uZWJyd2VzbGV5YW4uZWR1ghtkZXYub25saW5lZWR1Y2F0aW9uLnBzdS5l
ZHWCG2Rldi5zaGlidGVzdDcuaXNjLnVwZW5uLmVkdYIdZGV2LndyaWdodGxhYm9y
YXRvcnkueWFsZS5lZHWCEGRldi53dGkueWFsZS5lZHWCGWRldjEuZW5naW5lZXJp
bmcudWNzYi5lZHWCEWRldjEuc2kudW1pY2guZWR1ghdkZXZkci5hem1leC5hcml6
b25hLmVkdYIPZGlhbC5zcmFsYWIub3JnghRkbHBlLmNhbGMuZ2F0ZWNoLmVkdYIX
ZG1hdHMuc3Bjcy5zdGFuZm9yZC5lZHWCEmRtYXRzLnN0YW5mb3JkLmVkdYIOZHMu
YXJpem9uYS5lZHWCG2Vib3QyMDAubXVsdGlkZXZjb20udWFmLmVkdYITZWNhbHNv
LmJlcmtlbGV5LmVkdYINZWNjLm5hY2hhLm9yZ4IYZWR1Y2F0aW9uLnNzLnBhY2lm
aWMuZWR1ghRlaHMuc3BoLmJlcmtlbGV5LmVkdYIXZWlzLmRldi5jbXMxLmFzYS51
dy5lZHWCD2VtYm9keS55YWxlLmVkdYIbZW5nYWdpbmdodW1hbml0aWVzLnVjc2Iu
ZWR1ghplbmdpbmVlcmluZy5zcy5wYWNpZmljLmVkdYIdZW52aXJvbm1lbnQucmVz
ZWFyY2gueWFsZS5lZHWCG2V4cGVkaXRpb25zLnNhbmRpZWdvem9vLm9yZ4IgZXhw
bG9yZS5odW50ZXJidXNpbmVzc3NjaG9vbC5lZHWCImV4cGxvcmluZ3RoZWNvbXBs
ZXhpdHkudWNkYXZpcy5lZHWCF2ZhY3VsdHkuZ3NtLnVjZGF2aXMuZWR1gg5mZWNj
Lm5hY2hhLm9yZ4IQZmx0YS5jbGkuYXN1LmVkdYIZZ2VtLmJ1c2luZXNzLnVjZGVu
dmVyLmVkdYIMZ2V0LnBpbWEuZWR1giJnaWZ0Y2VydGlmaWNhdGVzLmNvb2tib29r
Y29va3MuY29tghdnaWwuZW5naW5lZXJpbmcuYXN1LmVkdYIQZ2lzLmFyY2hiYWx0
Lm9yZ4ISZ2l2ZXRvLnNoYXduZWUuZWR1gg1ncGYubmFjaGEub3JnghZnc2VmaWxt
cy5nc2UudXBlbm4uZWR1ghJndHBlLnBlLmdhdGVjaC5lZHWCD2hjaWkuY3MuY211
LmVkdYIRaGVhbHRoZWQuc2ZzdS5lZHWCHWhlYWx0aHNjaWVuY2VzLnNzLnBhY2lm
aWMuZWR1ghNob3N0Mi5vcGVubWluZHMuY29tgg9ob3N0My5jZW5taS5vcmeCFGhv
c3Q5MC5mYXJtZXJtYWMuY29tghBoci1raW9zay50c3UuZWR1gg5pZ2VydC51Y3Ni
LmVkdYIZaW5kaWEtdGVzdC5nZW5lcmF0aW9uLm9yZ4IRaW5kdXN0cmk0MC5pZGEu
ZGuCHGluZm8tZGV2LmNhbHBlcmZvcm1hbmNlcy5vcmeCFWluZm8ucmVsaWdpb25u
ZXdzLmNvbYINaW5mby52Y2ZhLmVkdYIPaW5mb25ldC5maWEub3JnghRpbmtzLmdv
dmRlbGl2ZXJ5LmNvbYISaW5zaWRlLmdjLmN1bnkuZWR1gg9pbnNpZGUua2p6ei5v
cmeCEWludGVybmFsLmdjaXIub3Jngh9pbnRlcm5hdGlvbmFsLnJlc2VhcmNoLnVj
c2IuZWR1ghlpbnRlcm5ldGNvdW5jaWwubmFjaGEub3JnghdpbnRyYW5ldC5vbGl2
ZWNyZXN0Lm9yZ4IVaXB2Ni5lYXJ0aGp1c3RpY2Uub3JnghdpdC1jaGF0LndlYi5h
cml6b25hLmVkdYIQaXQuMjJzcXVhcmVkLmNvbYITaXQudWFocy5hcml6b25hLmVk
dYITaXRjYXRhbHlzdC5zZnN1LmVkdYIbaXRlYWNodS5tdWx0aWRldmNvbS51YWYu
ZWR1ghRqb3VybmFsZGV2Lm5hZXljLm9yZ4IUandwbGF5ZXIuZXNzZW5jZS5jb22C
H2tpbS5sb3ZlbGFjZS5zaGlhdHN1c29jaWV0eS5vcmeCFmtpc3NpbmdidWcuYXJp
em9uYS5lZHWCGmt1YmVybmV0ZXMuZ292ZGVsaXZlcnkuY29tghJsYWJlbGxlbGFi
LmFzdS5lZHWCDmxhbWJkYS51c2MuZWR1ghNsYW5kaW5nLnBhY2lmaWMuZWR1ghJs
YXcuc3MucGFjaWZpYy5lZHWCEWxkYXAuY3NjYy51bmMuZWR1ghhsZWdhY3kuYnJp
Y2FydHNtZWRpYS5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwEwYK
KwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBABSrrmPFSU8OLmyo
tHV/wSMEoyVbpE82TEGtb2YPNbwSeujqrwZhL+aKgYRKoBZN9GewHT9qX2gP/L7u
B9x0tmxGgHluhmlkWNTkXgJeDthJEim1sd4tYGzdXM5wkWSVMwnF630OCi3Cb2EH
fTzCMTI/adtW23KWbn5JJnD4ThB+UHnLi05Fykcb0bwo/uHrnd4pXOjC8ii6puIx
Ln1r8wmlcPXe1h6xN6RATqA6zCcHxWOEEKMZ7A1PzJKqobl5nPHRc8rHtZVEy5R2
/jVQkAe7XXFCEuLIF8eS7mqeXcu5c0LBF/3t5EvyzJIkEFLASsmeQKtdAKlDlbSG
tDD3kRY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392010584450109678473827241934387251846866
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-13 19:33:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-11 19:33:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'covid.usmle.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2303 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid.usmle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cqn-erc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmtest.eastdunbarton.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd7.cmc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd7store.juilliard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design-engineering.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-camdenbase.libraries.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-covid19.chop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-lp-jhubsph.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-web-degacc.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-web-jhucareycoop.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www2.ofx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.business-services.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cee.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.champions-speakers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dhsri.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ece.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.embody.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.engineering.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.shibtest7.isc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wrightlaboratory.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wti.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.engineering.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.si.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devdr.azmex.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dial.sralab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlpe.calc.gatech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.spcs.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebot200.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecalso.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecc.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehs.sph.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eis.dev.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embody.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engaginghumanities.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engineering.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'environment.research.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expeditions.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.hunterbusinessschool.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploringthecomplexity.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faculty.gsm.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fecc.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flta.cli.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gem.business.ucdenver.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.pima.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcertificates.cookbookcooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gil.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveto.shawnee.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpf.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsefilms.gse.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtpe.pe.gatech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcii.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthed.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthsciences.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host2.openminds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host3.cenmi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host90.farmermac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr-kiosk.tsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igert.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'india-test.generation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industri40.ida.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info-dev.calperformances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.vcfa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infonet.fia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inks.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.gc.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.kjzz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.gcir.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international.research.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetcouncil.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.olivecrest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv6.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-chat.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.22squared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcatalyst.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iteachu.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journaldev.naeyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwplayer.essence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kim.lovelace.shiatsusociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kissingbug.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubernetes.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labellelab.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambda.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldap.cscc.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.bricartsmedia.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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