www.jhpiego.jhu.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:0b:96:90:f2:90:42:db:1b:b5:29:ca:14:8e:d5:a1:11:d4 was issued on by Let's Encrypt.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.jhpiego.jhu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0b:96:90:f2:90:42:db:1b:b5:29:ca:14:8e:d5:a1:11:d4
Serial Number (int): 265280100641299099816089677183617534595540
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 15:18:e9:a1:f8:a4:ab:5c:33:1e:3e:51:5f:92:fb:cb:09:7c:8d:96
Fingerprint (sha256): 6f:1d:fa:61:5d:aa:9b:3b:db:c3:d2:c4:f5:fb:4f:09:8b:6b:ca:60:8a:6c:fa:4a:49:9a:15:d6:e8:f0:1f:2a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.jhpiego.jhu.edu

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jhpiego.jhu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.jhpiego.jhu.edu
www.leadershipgiving.ucdavis.edu
www.lgcr.com
www.lhs.berkeley.edu
www.libertytreefoundation.org
www.marketing.arizona.edu
www.materialgirlcollection.com
www.molecularbiosci.utexas.edu
www.museconnect.arizona.edu
www.nai.arizona.edu
www.nartc.fcm.arizona.edu
www.newpiper.com
www.odee-pgmo.osu.edu
www.ol.rutgers.edu
www.online.foodsafety.msu.edu
www.onlinecso.dshs.wa.gov
www.onlineeducation.psu.edu
www.ordbc.arizona.edu
www.pin.nutrition.cornell.edu
www.projectrequest.axway.com
www.projectshare.sfsu.edu
www.randybryceforcongress.com
www.readiness.osu.edu
www.resx.usc.edu
www.reveal.uky.edu
www.sac.ofm.wa.gov
www.science.arizona.edu
www.sisterstory.org
www.spain.uga.edu
www.spedprof.arizona.edu
www.sph.berkeley.edu
www.ss.pacific.edu
www.strength.org
www.studentmedia.arizona.edu
www.studyabroad.arizona.edu
www.summer-winter.arizona.edu
www.summer.stanford.edu
www.swcsc.arizona.edu
www.sweetestbakeryincanada.com
www.travel.arizona.edu
www.universityextension.ucdavis.edu
www.urocitk.com
www.vpr.arizona.edu
www.wissc.arizona.edu
www1.ccny.cuny.edu
www2.albion.edu
www2.ccny.cuny.edu
www2.doctorswithoutborders.org
www2.familycenter.upenn.edu
www2.finance.upenn.edu
www2.naco.org
www2.president.usc.edu
www2.provost.upenn.edu
www2.stkate.edu
x17my.ctd.northwestern.edu
ymail.ymcatriangle.org
yqss.kjzz.org

Other certificates including the domain name jhu.edu

(limited to 100 certificates)
pl.cs.jhu.edu
test-web-lws.edu.help
jobs.jhu.edu
remotehelp.engineering.jhu.edu
devdma.jhu.edu
images.nursing.jhu.edu
msan2.myabsorb.com
landing.advanced.jhu.edu
it.uahs.arizona.edu
cluster3.technolutions.net
cluster.technolutions.net
ucdc.edu
cluster3.technolutions.net
www.circuits.jhu.edu
windinspire.jhu.edu
webapps.nursing.jhu.edu
ndes3.jh.edu
esmjhpyxappt1.win.ad.jhu.edu
me.jhu.edu
myrewards.jhu.edu
cigbe.jhu.edu
ach-nsmpx-bat.win.ad.jhu.edu
applygrad.jhu.edu
tpm.nursing.jhu.edu
advance.nursing.jhu.edu
sni.cloudflaressl.com
phdcouncil.bme.jhu.edu
uconnectlabs.com
applygrad.jhu.edu
esmepsidbpr2.win.ad.jhu.edu
parttime.carey.jhu.edu
test.eis.uw.edu
ugweb.cs.jhu.edu
ip360.win.ad.jhu.edu
testglycocareers.cclinic.jhu.edu
mattermost.hltcoe.jhu.edu
www4.cpiac.jhu.edu
upe.cs.jhu.edu
webapps.nursing.jhu.edu
www.design-engineering.princeton.edu
login.idies.jhu.edu
support.cs.jhu.edu
partnerships.advanced.jhu.edu
cluster3.technolutions.net
nxterra.ucop.edu
hrnt.jhu.edu
pstage.nts.jhu.edu
banking-business-review.com
esgessoapp22.win.ad.jhu.edu
myrap.jhu.edu
roraycenter.win.ad.jhu.edu
publichealth.jhu.edu
help.pha.jhu.edu
entrepreneurship.jhu.edu
www.jhu.edu
dev.faculty.jhu.edu
www.hcii.cs.cmu.edu
apps.ep.jhu.edu
www.blogs.earthjustice.org
circuits.jhu.edu
ebola.acm.jhu.edu
wse.jhu.edu
msan2.myabsorb.com
onehop.jhu.edu
www.ccp.jhu.edu
webdev.colorado.edu
virtual2.unlv.edu
research-pp.stonybrook.edu
naclo.clsp.jhu.edu
live25job.uis.jhu.edu
data.ep.jhu.edu
mycloudtestint.jh.edu
ece.jhu.edu
finaid.jhu.edu
cluster.technolutions.net
ccvl.jhu.edu
pfprod.isis.jhu.edu
upenn-it.asc.upenn.edu
oncology.jhu.edu
hrntdev.jhu.edu
e-nextcatalog.jhu.edu
phdcouncil.bme.jhu.edu
devapps.pathology.jhu.edu
esmuistsappp01.win.ad.jhu.edu
5668515822436352-fe1.pantheonsite.io
ach-cucm-lab-pub.win.ad.jhu.edu
cluster.technolutions.net
*.bme.jhu.edu
jhmsgtextweb.wintest.adtest.jhu.edu
hub.meed.com
www.fastforward.jhu.edu
cluster3.technolutions.net
uconnectlabs.com
request.advanced.jhu.edu
msan2.myabsorb.com
cluster.technolutions.net
esmpmdbpr4.win.ad.jhu.edu
n002.offcampuspartners.com
n002.offcampuspartners.com
devrpad.jhu.edu

Certificate

The complete raw certificate details for www.jhpiego.jhu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265280100641299099816089677183617534595540
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-26 08:22:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 08:22:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jhpiego.jhu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1397 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhpiego.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leadershipgiving.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lgcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lhs.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertytreefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketing.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.materialgirlcollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.molecularbiosci.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.museconnect.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nai.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newpiper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odee-pgmo.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ol.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.online.foodsafety.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinecso.dshs.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ordbc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pin.nutrition.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectrequest.axway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectshare.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.randybryceforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readiness.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reveal.uky.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sac.ofm.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.science.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sisterstory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spain.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spedprof.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sph.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strength.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studentmedia.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studyabroad.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summer-winter.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summer.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swcsc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sweetestbakeryincanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travel.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universityextension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urocitk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vpr.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wissc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.albion.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.familycenter.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.finance.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.naco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.president.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.provost.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.stkate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x17my.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymail.ymcatriangle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yqss.kjzz.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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