20240202.uncharteddesign.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f8:bc:68:9d:b5:db:1a:dd:65:09:06:4c:3d:da:28:48:34 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=20240202.uncharteddesign.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:f8:bc:68:9d:b5:db:1a:dd:65:09:06:4c:3d:da:28:48:34
Serial Number (int): 433089608784260992214714833923380280313908
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fa:a7:30:22:60:b8:bb:18:b0:b5:6f:68:a3:cc:39:72:13:cb:22:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b5:32:b8:bb:30:17:62:f0:93:8b:be:ad:14:fb:98:99:00:d4:99:7e
Fingerprint (sha256): 6b:1a:8c:7d:42:ff:d4:88:5a:fc:51:6e:af:89:24:2a:11:9a:33:ba:ea:4f:3d:9b:dd:8d:c5:3e:b4:ed:74:b5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 20240202.uncharteddesign.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 20240202.uncharteddesign.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

20240202.uncharteddesign.com
advanceweb.com
alphaluxe.com
anotherbadsite.uncharteddesign.com
anxietyclinic.rutgers.edu
aura.its.rochester.edu
av.catalystpaper.com
bes.catalystpaper.com
beta2010.scilsnet.rutgers.edu
bighoki288.krtv.com
bowelcancerresearch.org
brother.gbci.org
c3s.rutgers.edu
cards.bankrate.com
corporateandfoundationrelations.dev.umich.edu
cpcontacts.onechild.org
cps.uoguelph.ca
crm.catalystpaper.com
crosscurrents.berkeley.edu
ctclinkid.pencol.edu
datacom.krtv.com
dev-ucfpd.pantheon.io
dev.americaspromise.org
dev.ashm999.fr
dialin.catalystpaper.com
drupal.fruitguys.com
emerge85.io
emergobyul.jp
envisionbank.com
eq4all.lls.edu
fanclub.willienelson.com
ftp.benzcommunications.com
ftp.gbci.org
ftp.lafayettegeneral.com
ftp.seatu.org
ftp.terraferma.com
ftp.vermontsportscar.com
fwi.lls.edu
gacor.catalystpaper.com
gateway.catalystpaper.com
goverment.gbci.org
itwfoodequipmentgroup.com
live-ume.pantheon.io
livestream.lls.edu
lync.catalystpaper.com
maana.io
mach2.com
meet.catalystpaper.com
msgbroker.catalystpaper.com
msgtester.catalystpaper.com
multidev-uwbwww.site1.uwb.edu
neuroscience-dev-ki.stanford.edu
nopantheonsite.uncharteddesign.com
olympus178.gsm.cornell.edu
outlook.catalystpaper.com
pantheon.womensaudiomission.org
phyloloab.stage.franklinresearch.uga.edu
powerandwater.meed.com
preprod.grapesandwine.cals.cornell.edu
promo138.krtv.com
protogel.gsm.cornell.edu
randomdomain.uncharteddesign.com
redirtest.biology.cornell.edu
reverseidiocracy.com
sandbox.additudemag.com
sandbox.thefoodproject.org
sipinternal.catalystpaper.com
test.americaspromise.org
test.fourwindsinteractive.com
testmondavi.ucdavis.edu
theinclusionproject.rutgers.edu
unpriv.uncharteddesign.com
vetpath.osu.edu
webcon.catalystpaper.com
webmail.catalystpaper.com
weloveweather.tv
whatstartshere.eval.aamc.org
www-legacy.lukeslocal.com
www.bes.catalystpaper.com
www.catalystpaper.com
www.copperrockvillage.com
www.covid-19.ed.ac.uk
www.institute.ischool.utoronto.ca
www.ucweb.ucalgary.ca
xmpp.catalystpaper.com
zikacommunicationnetwork.org

Other certificates including the domain name uncharteddesign.com

(limited to 100 certificates)
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
skyline.uncharteddesign.com
sni43688.cloudflaressl.com
djpc.uncharteddesign.com
fuel.uncharteddesign.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
skyline.uncharteddesign.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
djpc.uncharteddesign.com
skyline.uncharteddesign.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
agen-togel-hadiah.advanceweb.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
agen-togel-hadiah.advanceweb.com
sni43688.cloudflaressl.com
dnsadvisorpro.com
uncharteddesign.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
djpc.uncharteddesign.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
skyline.uncharteddesign.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
djpc.uncharteddesign.com
sni43688.cloudflaressl.com
skyline.uncharteddesign.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
dnsadvisorpro.com
uncharteddesign.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
skyline.uncharteddesign.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
sni43688.cloudflaressl.com
20240202.uncharteddesign.com

Certificate

The complete raw certificate details for 20240202.uncharteddesign.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSnemv0wZzcXAgMkBQX
ztwjNHFrHpIs5axrzzrdlw7T+GZAQLPiUvSZmF3ScRQ1Ni77M7wvvj8WKgEm6kmk
IGsqEr1NwVO/9M+bfL4ePy1ywV87Wx7ZOVVK4JWJMqctOtWZynJz3jX67Nda0+9B
++4/N4TAaLpUnxu83mMaTL+l/8yYin0iItxxZ3YRMvL8oMO9BWqFighCSszfIpRu
fGHjpEeodJZe7aLi7DcePvwyXZWi/al1YQeCdFkrpkcgk8myhP/APzQjk3bdKAlw
KQDdvQR4Y3b+bMJVibDWVrVqjLz+ybpaAJiOjKOmp9NDC6LZPJujVsE+mvYR8y2Z
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433089608784260992214714833923380280313908
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-29 18:07:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 18:07:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '20240202.uncharteddesign.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295278889261962340330570593076765092564594026629510040566849443941721212705222905469227342749655760761925628146467776896918161669177237506061638055976839317974540229085566909601290432792766688540743857041618507082302908209321494362376641574366690514136936988276436757394515726000349835912320682069511736058985263380188984941851626522348036976567257123937402752130277851931257557691396509910741392947845349707974538616547869499133806197294376341097227039876415788275764051935080580783290065738507278734728703160147978353048962982659390140744073959855669537306275821116832669307766091573181749448001568724078979553621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							faa7302260b8bb18b0b56f68a3cc397213cb2214
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2130 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '20240202.uncharteddesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanceweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphaluxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anotherbadsite.uncharteddesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anxietyclinic.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aura.its.rochester.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'av.catalystpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.catalystpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta2010.scilsnet.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bighoki288.krtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowelcancerresearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brother.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c3s.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cards.bankrate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporateandfoundationrelations.dev.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.onechild.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cps.uoguelph.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.catalystpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crosscurrents.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctclinkid.pencol.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datacom.krtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-ucfpd.pantheon.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.americaspromise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ashm999.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.catalystpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drupal.fruitguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerge85.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergobyul.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envisionbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eq4all.lls.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanclub.willienelson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.benzcommunications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.lafayettegeneral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.seatu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.terraferma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.vermontsportscar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fwi.lls.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gacor.catalystpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.catalystpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goverment.gbci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itwfoodequipmentgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-ume.pantheon.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livestream.lls.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync.catalystpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maana.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mach2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.catalystpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msgbroker.catalystpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msgtester.catalystpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multidev-uwbwww.site1.uwb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuroscience-dev-ki.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nopantheonsite.uncharteddesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympus178.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.catalystpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantheon.womensaudiomission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phyloloab.stage.franklinresearch.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerandwater.meed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.grapesandwine.cals.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promo138.krtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protogel.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'randomdomain.uncharteddesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirtest.biology.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reverseidiocracy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.additudemag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.thefoodproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipinternal.catalystpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.americaspromise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.fourwindsinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testmondavi.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theinclusionproject.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unpriv.uncharteddesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetpath.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcon.catalystpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.catalystpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weloveweather.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatstartshere.eval.aamc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-legacy.lukeslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bes.catalystpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catalystpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copperrockvillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.covid-19.ed.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.institute.ischool.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucweb.ucalgary.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xmpp.catalystpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zikacommunicationnetwork.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e8b9c3eb20000040300473045022100e709887876ea4feda139f04cd057f15e1b977f8faa1f52d87ca979f2f6a3bff1022044bf6724bb79270e1ab29d21184ad6c22a1c957f557989b8dcc3f8410622d7bb007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e8b9c3ef10000040300483046022100c864be573b0b22ba30686c256a2bcdf4a9a35a30640243572c53024918ea0da1022100c4b57f1a3ffb195bdb80febdb434cef2dca0d1103949bf0d448764bed5a0a72d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0007b0af30dd15c11bcabf518a1d4d9aa8f34f46c1fb65c123f16e7cc7ed7bd42cf631984526cedb04777f8f21655a404d1ebd6a5b71fe0a0e094a930f3f690b68d9d674be9bd8f04743b8045360bf8c816f062343b60aa2392a9892a05f5f1b4bed07bc50eaf21ec4e2a1f04816fcebac4bcfab119411134465d534c2b8934a34f8fd43dfcb935f81f3b9d0ddc415c5050c53bdada558987b2c38b2cc4958628ecca67decaaa8db88d6943804e1c727d2ba46253cbb9230ad5c0185edb3fca67e3604f56825e76be41bd51d745ae10d7ddf3db28645853180cf2ac3db43501d75d2446f09991a4f49c6044ba6c7c7dd4ba54e18f713b06b35d31000399b40294e