5680423082393600-fe4.pantheonsite.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7a:27:32:b0:0f:28:9f:78:47:e7:b7:7a:de:e4:dc:b4:bc was issued on by Let's Encrypt.

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=5680423082393600-fe4.pantheonsite.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7a:27:32:b0:0f:28:9f:78:47:e7:b7:7a:de:e4:dc:b4:bc
Serial Number (int): 302903409637218855810844601544680301966524
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 57:02:fd:bf:2c:4d:ef:83:1b:a9:79:63:4d:e6:41:5a:40:15:b8:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f1:41:19:92:f9:58:a2:15:d6:6e:b1:78:43:db:8a:15:32:03:30:f2
Fingerprint (sha256): 6c:c4:9b:47:b6:f8:18:18:7a:ed:c2:06:62:1d:4e:0e:7b:69:e8:5b:b9:00:21:c8:2c:27:04:94:01:84:39:48

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 5680423082393600-fe4.pantheonsite.io

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 5680423082393600-fe4.pantheonsite.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

5680423082393600-fe4.pantheonsite.io
aggiehero.ucdavis.edu
altawaverly.com
amerivents.com
api.pintexsolutions.com
app.pintexsolutions.com
asev.org
benefits.georgetown.edu
bioinformatics.georgetown.edu
blogs.ucdavis.edu
brownstoneproperties.com
cricketwirelessperks.com
curiosity.ucdavis.edu
customerexperiencenetwork.org
financialaffairs.georgetown.edu
french.georgetown.edu
friendscentercorp.org
geriatrics.georgetown.edu
ghstar.org
go.ucdavis.edu
green-promise.org
history.georgetown.edu
hoyakids.georgetown.edu
imaginationtakesshape.com
innocentbystander.com.au
journalism.georgetown.edu
my.pintexsolutions.com
ofrboise.com
pilothilladvisors.com
rightsforall.org
rswreverseengineeringandmachining.com
sthope.org
tag.bio
test.feedingamerica.org
thetractiongroup.com
unfold.ucdavis.edu
unfoldpodcast.ucdavis.edu
vintagehousing.com
www.airportscouncil.org
www.altawaverly.com
www.amerivents.com
www.asev.org
www.brownstoneproperties.com
www.cricketwirelessperks.com
www.customerexperiencenetwork.net
www.customerexperiencenetwork.org
www.friendscentercorp.org
www.ghstar.org
www.green-promise.org
www.imaginationtakesshape.com
www.innocentbystander.com.au
www.ofrboise.com
www.openhandatlanta.org
www.pilothilladvisors.com
www.rightsforall.org
www.rswreverseengineeringandmachining.com
www.sthope.org
www.thetractiongroup.com
www.vintagehousing.com

Other certificates including the domain name 5680423082393600-fe4.pantheonsite.io

(limited to 100 certificates)
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io

Certificate

The complete raw certificate details for 5680423082393600-fe4.pantheonsite.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDGqfkcR58JDGUjjfF3o
uxTziAMuq73LJEJFQBLWMVVtxSqLCODDAc/vIqnaMn5VGUnNd6APz0FhZCv9MtgR
LMZ7YUwW42pNdR7xFK6F+SBOZBG4Jr90mdEdcJSnOW0RYtsAx6iN+lXCmvbFGlGT
GPbE1tunyUlICUEeRjoAvqXHgCVGzdG/qTFGSrEdh/7Vpb6qvY2sqcYa9jkYMgel
1pp3hjdygoLy7250U484PWbQ5rQsPvpFQ/Upamj/27TRqFCgJ0Tr9SW/d9Qr7IEw
IXRIcI8d8iiA7qgysgL8w2b1q+RlsviVMHwb/ap46npsHt6hDUB95V2/r+9y0O1/
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302903409637218855810844601544680301966524
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-23 13:32:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 13:32:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5680423082393600-fe4.pantheonsite.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18707760347121943150116249891125201859036403023008143853550793296842643752153993493542468762401245989491399482566496677845018962204140898826898583855693902268833321183836113618241714063273293436817034578178841687839353261583958224047309187693662900062540995471919037671490156420065680307641440169474567973187823484285671210902184129097003031949937311897265063911856696198898692612388697304111124020667213646780422057204419974547022685772480755093417658014126728354795298676042279948453478354613858895933936212746952114998739543099196481808951268079465991203011247610995443739493378120184121493825296758081897425108769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5702fdbf2c4def831ba979634de6415a4015b838
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1412 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5680423082393600-fe4.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggiehero.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altawaverly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amerivents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.pintexsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.pintexsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioinformatics.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brownstoneproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketwirelessperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curiosity.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customerexperiencenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialaffairs.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'french.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendscentercorp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geriatrics.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghstar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'green-promise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'history.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoyakids.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imaginationtakesshape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innocentbystander.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journalism.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.pintexsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofrboise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilothilladvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightsforall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rswreverseengineeringandmachining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tag.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.feedingamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetractiongroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unfold.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unfoldpodcast.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintagehousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airportscouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altawaverly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amerivents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brownstoneproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cricketwirelessperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.customerexperiencenetwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.customerexperiencenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendscentercorp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghstar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.green-promise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imaginationtakesshape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innocentbystander.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ofrboise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openhandatlanta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pilothilladvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rightsforall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rswreverseengineeringandmachining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sthope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetractiongroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vintagehousing.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c1f3f0b9f0000040300483046022100998edbbfdb78dda73031138616bb8b081ace9f9f8d5adfacb9f8153c49843908022100b7c047e3c41558e824e732f302ed368ef6f3f0de7e89e90ea4ebe2f0c37c509e007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c1f3f0da00000040300483046022100b9b04bdcc4802ac9eec4c9fbfa0979fd1d3136982e4e1f0cc0e3d183fc328ba9022100a8b683c4786f9a4cc226072f14de5cc2e2e56500663f711b068cb1a581caaba8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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