5680423082393600-fe4.pantheonsite.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:af:94:42:3b:ea:04:e5:27:e6:4b:03:f6:0f:97:28:53:9d was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=5680423082393600-fe4.pantheonsite.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:af:94:42:3b:ea:04:e5:27:e6:4b:03:f6:0f:97:28:53:9d
Serial Number (int): 408195627588377120156658237311896278029213
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 57:02:fd:bf:2c:4d:ef:83:1b:a9:79:63:4d:e6:41:5a:40:15:b8:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 69:1a:04:5d:bf:3a:86:26:35:63:be:6b:5f:b5:9a:95:46:bd:29:04
Fingerprint (sha256): 6f:7b:82:1f:ee:9d:e6:08:d5:73:e7:52:ae:01:0a:ec:13:39:99:7f:3b:0f:1b:f9:0d:84:0c:98:fe:34:2b:68

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 5680423082393600-fe4.pantheonsite.io

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 5680423082393600-fe4.pantheonsite.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

5680423082393600-fe4.pantheonsite.io
aap.georgetown.edu
aggiehero.ucdavis.edu
altawaverly.com
amerivents.com
api.pintexsolutions.com
app.pintexsolutions.com
asev.org
benefits.georgetown.edu
bioinformatics.georgetown.edu
blogs.ucdavis.edu
brownstoneproperties.com
commencement.georgetown.edu
cricketwirelessperks.com
curiosity.ucdavis.edu
customerexperiencenetwork.org
financialaffairs.georgetown.edu
french.georgetown.edu
friendscentercorp.org
geriatrics.georgetown.edu
ghstar.org
globalhealthms.georgetown.edu
go.ucdavis.edu
governance.georgetown.edu
gradcareer.georgetown.edu
green-promise.org
grvp.georgetown.edu
history.georgetown.edu
hoyakids.georgetown.edu
icp.georgetown.edu
ideaa.georgetown.edu
imaginationtakesshape.com
innocentbystander.com.au
internalaudit.georgetown.edu
journalism.georgetown.edu
kidsandenvironment.georgetown.edu
mailservices.georgetown.edu
medievalstudies.georgetown.edu
memory.georgetown.edu
my.pintexsolutions.com
ofrboise.com
pilothilladvisors.com
rightsforall.org
rswreverseengineeringandmachining.com
spanport.georgetown.edu
sthope.org
tag.bio
test.feedingamerica.org
thetractiongroup.com
unfold.ucdavis.edu
unfoldpodcast.ucdavis.edu
vintagehousing.com
www.airportscouncil.org
www.altawaverly.com
www.amerivents.com
www.asev.org
www.brownstoneproperties.com
www.cricketwirelessperks.com
www.customerexperiencenetwork.net
www.customerexperiencenetwork.org
www.friendscentercorp.org
www.ghstar.org
www.green-promise.org
www.imaginationtakesshape.com
www.innocentbystander.com.au
www.ofrboise.com
www.openhandatlanta.org
www.pilothilladvisors.com
www.rightsforall.org
www.rswreverseengineeringandmachining.com
www.sthope.org
www.thetractiongroup.com
www.vintagehousing.com

Other certificates including the domain name 5680423082393600-fe4.pantheonsite.io

(limited to 100 certificates)
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io
5680423082393600-fe4.pantheonsite.io

Certificate

The complete raw certificate details for 5680423082393600-fe4.pantheonsite.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDGqfkcR58JDGUjjfF3o
uxTziAMuq73LJEJFQBLWMVVtxSqLCODDAc/vIqnaMn5VGUnNd6APz0FhZCv9MtgR
LMZ7YUwW42pNdR7xFK6F+SBOZBG4Jr90mdEdcJSnOW0RYtsAx6iN+lXCmvbFGlGT
GPbE1tunyUlICUEeRjoAvqXHgCVGzdG/qTFGSrEdh/7Vpb6qvY2sqcYa9jkYMgel
1pp3hjdygoLy7250U484PWbQ5rQsPvpFQ/Upamj/27TRqFCgJ0Tr9SW/d9Qr7IEw
IXRIcI8d8iiA7qgysgL8w2b1q+RlsviVMHwb/ap46npsHt6hDUB95V2/r+9y0O1/
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408195627588377120156658237311896278029213
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-02 11:09:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-31 11:09:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5680423082393600-fe4.pantheonsite.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18707760347121943150116249891125201859036403023008143853550793296842643752153993493542468762401245989491399482566496677845018962204140898826898583855693902268833321183836113618241714063273293436817034578178841687839353261583958224047309187693662900062540995471919037671490156420065680307641440169474567973187823484285671210902184129097003031949937311897265063911856696198898692612388697304111124020667213646780422057204419974547022685772480755093417658014126728354795298676042279948453478354613858895933936212746952114998739543099196481808951268079465991203011247610995443739493378120184121493825296758081897425108769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5702fdbf2c4def831ba979634de6415a4015b838
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1783 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5680423082393600-fe4.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aap.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggiehero.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altawaverly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amerivents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.pintexsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.pintexsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioinformatics.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brownstoneproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commencement.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketwirelessperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curiosity.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customerexperiencenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialaffairs.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'french.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendscentercorp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geriatrics.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghstar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalhealthms.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'governance.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gradcareer.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'green-promise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grvp.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'history.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoyakids.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icp.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideaa.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imaginationtakesshape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innocentbystander.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internalaudit.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journalism.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidsandenvironment.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailservices.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medievalstudies.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memory.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.pintexsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofrboise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilothilladvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightsforall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rswreverseengineeringandmachining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spanport.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sthope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tag.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.feedingamerica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetractiongroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unfold.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unfoldpodcast.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintagehousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airportscouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altawaverly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amerivents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asev.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brownstoneproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cricketwirelessperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.customerexperiencenetwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.customerexperiencenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendscentercorp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghstar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.green-promise.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imaginationtakesshape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innocentbystander.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ofrboise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openhandatlanta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pilothilladvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rightsforall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rswreverseengineeringandmachining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sthope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetractiongroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vintagehousing.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c523c34620000040300473045022100f13f5da460318e20173c8d81de17a5ec55b42f592a9428bd4e662eb92d5733020220371d3b079a4df24471e69243e30a84f2455fc68b223d7389d845e8f72fb2704a007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c523c342e0000040300473045022100c70d79c2f609281c128861a8f54e5684b1179c7d5108de90c2872066f524181c022009b4e933bcf5a7ad581000205b2c3da042c3ee0d8e86a7871262390a199845bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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