www.bodywerks-medspa.com

Issued by R3

About this certificate

This digital certificate with serial number 03:7a:c7:93:73:c2:46:58:d8:78:77:4f:af:3b:fc:ab:d1:3b was issued on by Let's Encrypt.

With 67 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bodywerks-medspa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7a:c7:93:73:c2:46:58:d8:78:77:4f:af:3b:fc:ab:d1:3b
Serial Number (int): 303116588546303774666895019563063788163387
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ef:4f:37:61:66:8c:d0:80:e2:f0:39:6c:a3:c9:ed:e7:f6:8f:1c:03
Fingerprint (sha256): 66:85:05:b0:8f:5b:4d:98:41:f0:42:8d:b6:2d:c0:7d:b8:3a:ed:c6:30:24:81:d7:b2:74:2f:a6:a3:45:28:45

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.bodywerks-medspa.com

67

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bodywerks-medspa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bodywerks-medspa.com
www.cbs.asu.edu
www.cie.ucdavis.edu
www.crwr.utexas.edu
www.cybersecurity.umass.edu
www.datahero.com
www.design-engineering.princeton.edu
www.diplomacy.state.gov
www.dl.odu.edu
www.drraxa.com
www.earlymodernenglishdrama.folger.edu
www.ee.udel.edu
www.ein.az.gov
www.esc.rutgers.edu
www.eventsinfo.presidio.edu
www.extension.ucdavis.edu
www.financialaid.arizona.edu
www.fra-yes.org
www.gim.utoronto.ca
www.giving.dartmouth.edu
www.grrc.az.gov
www.gs.utexas.edu
www.hcii.cs.cmu.edu
www.heritagepointewarren.org
www.ihe.uga.edu
www.inas2.uga.edu
www.internationaladmissions.arizona.edu
www.italianacademy.columbia.edu
www.jhpiego.jhu.edu
www.lgcr.com
www.lhs.berkeley.edu
www.libertytreefoundation.org
www.nartc.fcm.arizona.edu
www.newpiper.com
www.nxterra.ucop.edu
www.odee-pgmo.osu.edu
www.onlineeducation.psu.edu
www.ordbc.arizona.edu
www.orientation.smhs.gwu.edu
www.projectrequest.axway.com
www.projectshare.sfsu.edu
www.randybryceforcongress.com
www.readiness.osu.edu
www.resx.usc.edu
www.sac.ofm.wa.gov
www.sisterstory.org
www.spain.uga.edu
www.ss.pacific.edu
www.stopbreathethink.com
www.stopbreathethink.org
www.strength.org
www.studyabroad.arizona.edu
www.summer.stanford.edu
www.support.dana.org
www.swcsc.arizona.edu
www.uhi.human.cornell.edu
www.universityextension.ucdavis.edu
www.world.arizona.edu
www1.ccny.cuny.edu
www2.ccny.cuny.edu
www2.doctorswithoutborders.org
www2.familycenter.upenn.edu
www2.finance.upenn.edu
www2.naco.org
www2.president.usc.edu
www2.provost.upenn.edu
www2.stkate.edu

Other certificates including the domain name bodywerks-medspa.com

(limited to 100 certificates)
test-web-lws.edu.help
www.blogs.earthjustice.org
webdev.colorado.edu
virtual2.unlv.edu
5665054615666688-fe4.pantheonsite.io
www.bodywerks-medspa.com
5758142528880640-fe4.pantheonsite.io
stage.courts.ca.gov
5758142528880640-fe4.pantheonsite.io
adminanimals.sandiegozoo.org
5665054615666688-fe4.pantheonsite.io
www.advising.arizona.edu
5665054615666688-fe4.pantheonsite.io
staging.freedomworks.org
5758142528880640-fe4.pantheonsite.io
www.apac.arizona.edu
5758142528880640-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
wireless.unlv.edu
5665054615666688-fe4.pantheonsite.io
swfwmd.state.fl.us
5665054615666688-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
staging.freedomworks.org
5665054615666688-fe4.pantheonsite.io
www.acims.arizona.edu
5758142528880640-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
staging.freedomworks.org
www.blogs.earthjustice.org
test-web-lws.edu.help
5758142528880640-fe4.pantheonsite.io
www.acims.arizona.edu
5665054615666688-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
test-web-lws.edu.help
5758142528880640-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
wp.americancouncils.org
wanprc.washington.edu
5665054615666688-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
test.2.www.upenn.edu
www.bodywerks-medspa.com
5758142528880640-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
stage.courts.ca.gov
5758142528880640-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
test-web-lws.edu.help
5665054615666688-fe4.pantheonsite.io
staging.freedomworks.org
5758142528880640-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
staging.freedomworks.org
staging.freedomworks.org
5758142528880640-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
stage.nebrwesleyan.edu
5758142528880640-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
swfwmd.state.fl.us
5758142528880640-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
www.blogs.earthjustice.org
5665054615666688-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
5758142528880640-fe4.pantheonsite.io
5665054615666688-fe4.pantheonsite.io
www.advising.arizona.edu
5665054615666688-fe4.pantheonsite.io

Certificate

The complete raw certificate details for www.bodywerks-medspa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303116588546303774666895019563063788163387
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-29 20:20:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-28 20:20:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bodywerks-medspa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1602 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodywerks-medspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbs.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cie.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crwr.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cybersecurity.umass.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datahero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.design-engineering.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diplomacy.state.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dl.odu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drraxa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earlymodernenglishdrama.folger.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ee.udel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ein.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esc.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eventsinfo.presidio.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financialaid.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fra-yes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gim.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giving.dartmouth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grrc.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gs.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcii.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heritagepointewarren.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihe.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inas2.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internationaladmissions.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.italianacademy.columbia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhpiego.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lgcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lhs.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertytreefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newpiper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nxterra.ucop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odee-pgmo.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ordbc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orientation.smhs.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectrequest.axway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectshare.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.randybryceforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readiness.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sac.ofm.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sisterstory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spain.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stopbreathethink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stopbreathethink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strength.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studyabroad.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summer.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.support.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swcsc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uhi.human.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universityextension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.world.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.familycenter.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.finance.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.naco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.president.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.provost.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.stkate.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001838b1fc5310000040300483046022100f46cc02772e6410f65611c64716c5a95091a2c4e8b1aaeca645d560bc1863c2f022100b18cdf5bfed4bdccaf525b3502bc4d0af27bf2372225f547b7c25b50bba4aa5100760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001838b1fc54f0000040300473045022027b59ee171ac47488a90bd342b57f76d114feeaecb97c73b19cfd75106a5966c022100f8a8bbec5c8b1be3d38d1ef39a305c54e5a32a0cf54b62f459bc2df30b0e4aa4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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