clubmanager.me

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:20:56:19:e6:6f:8e:46:c6:2c:32:e1:ad:63:2b:e7:e3:59 was issued on by Let's Encrypt.

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=clubmanager.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:20:56:19:e6:6f:8e:46:c6:2c:32:e1:ad:63:2b:e7:e3:59
Serial Number (int): 272340341625602304217473556369205310776153
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:3c:53:58:b9:af:a0:ea:16:ac:03:9a:8a:7f:4f:ac:85:e1:2c:8d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5a:f5:f2:a9:c2:07:1f:07:1d:ac:8a:2c:72:20:9b:f1:f8:13:77:0b
Fingerprint (sha256): 70:5d:f5:29:99:85:9a:e6:c5:a4:2d:85:e0:38:ee:f2:33:2e:1f:7a:b7:79:a8:80:60:4f:91:d7:87:e9:79:3e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate clubmanager.me

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clubmanager.me

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afterguard.clubmanager.me
app.tisailing.org
bowtostern.clubmanager.me
clients-pinfirelabs.clubmanager.me
clients-pinfirestudios.clubmanager.me
clients.pinfirelabs.com
clients.pinfirestudios.com
clover.clubmanager.me
clubmanager.me
demo.clubmanager.me
events.hooferouting.org
events.hooferscuba.org
events.hooferscubaclub.org
events.hoofersns.org
hoofers.clubmanager.me
lessons.hooferriding.org
lessons.hoofersailing.org
members.hoofermountaineering.org
members.hoofers.org
members.pi.theshop.build
members.sf.theshop.build
members.sj.theshop.build
members.theshop.build
nbss.clubmanager.me
npsc.clubmanager.me
ocsc-sandbox.clubmanager.me
ocsc.clubmanager.me
outdoor-uw.clubmanager.me
pi.theshop.clubmanager.me
pssi.clubmanager.me
register.bowtosternboating.com
register.tacomajrsail.org
registration.hooferyouth.org
registration.sailcalhoun.org
registration.sailmpls.org
reservations.pugetsoundsailing.com
reserve.sbsail.com
reserve.texassailing.com
rochesteryc.clubmanager.me
sailcalhoun.clubmanager.me
sailmpls.clubmanager.me
sailsi.clubmanager.me
sandbox-l.clubmanager.me
sandbox-s.clubmanager.me
sbsail.clubmanager.me
seasafaris.clubmanager.me
secure.hoofers.org
sf.theshop.clubmanager.me
sj.theshop.clubmanager.me
spyc.clubmanager.me
ssc.clubmanager.me
texas-sailing.clubmanager.me
theshop.clubmanager.me
tisc.clubmanager.me
tsa.clubmanager.me
tyc-youth.clubmanager.me
wisconsin-basecamp.clubmanager.me
yachtxp.clubmanager.me

Other certificates including the domain name clubmanager.me

(limited to 100 certificates)
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
www-source.pinfirelabs.com
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
staging.clubmanager.me
clubmanager.me
docs-source.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
clubmanager.me
clover.clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
www-source.pinfirelabs.com
staging.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
*.clubmanager.me
craft-dev.clubmanager.me
clubmanager.me
*.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
updates.clubmanager.me
clubmanager.me
events.hooferouting.org
clover.staging.clubmanager.me
clover.staging.clubmanager.me
clubmanager.me
utils.clubmanager.me
staging.clubmanager.me
*.clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clover.staging.clubmanager.me
clover.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
utils.clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
pinfirelabs.com

Certificate

The complete raw certificate details for clubmanager.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJHY07z65/LKzRjAs6zo
lKZ9X8FZdMm5kZ5om12E3KfOkQLnZQ218MMmZ+oi65feAcmonqWkntNJJXPQKPAA
MjwvvtcdolPeBvBkTVWJIpLS9H6b2OEdFwlu/8UTTgYK4ydwkHfZEe55QqhENI04
yXv0fsrXnnI8PIDk1bt/wEwmCCZkgCjosgWLQT8wEA7C3t4fzLZtuR1LE2xaZX4B
GLHHxAOUzd57GrXSy7MVrEkvGrqViepemS2/UhnfaW3Hz1QY6Xe5Omq6UrE+tLlL
EZ31HWxmHa/I1GzodpgakXWvCj5qh/3XYWfHK3wWPKTv/+dtYzHYP6/lRyIfpmmL
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272340341625602304217473556369205310776153
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-02 21:42:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-02 21:42:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clubmanager.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19765095401460095180212983564374996524322615486680548789127652443541452857569315666825395327633331695452749300201224921955654040977768678178156820316707219887545302180945777836027041897704815838833872507530560426394399655815928583825738685993162207553392581195022222924245400864485538595793845932805363881759225570133209369966050630512189758814493988677226867043299395887304328891167686907982619055834820772016026997762296618199096357472481315034068347798107510549575111864183020256145438061185804577925441141395463518124303294781824530162815861766921038966154516873094038474103040846469636718271456584934317489752843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb3c5358b9afa0ea16ac039a8a7f4fac85e12c8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1493 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afterguard.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tisailing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowtostern.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients-pinfirelabs.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients-pinfirestudios.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.pinfirelabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.pinfirestudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clover.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hooferouting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hooferscuba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hooferscubaclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hoofersns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoofers.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessons.hooferriding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessons.hoofersailing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.hoofermountaineering.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.hoofers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.pi.theshop.build'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.sf.theshop.build'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.sj.theshop.build'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.theshop.build'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbss.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npsc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocsc-sandbox.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocsc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outdoor-uw.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pi.theshop.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pssi.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.bowtosternboating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.tacomajrsail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.hooferyouth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.sailcalhoun.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.sailmpls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.pugetsoundsailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.sbsail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.texassailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochesteryc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailcalhoun.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailmpls.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailsi.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-l.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-s.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbsail.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seasafaris.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hoofers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.theshop.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sj.theshop.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spyc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texas-sailing.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theshop.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tisc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsa.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyc-youth.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wisconsin-basecamp.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yachtxp.clubmanager.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016810bbbd82000004030047304502205ffdedfdc0993cd20fe686d341977241fbdc931f906bb24a8ac29ab49964a3cb022100dff24329f98f7596414a14630b5d427bd2b4333af743db97d10f8cd693332c0e007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016810bbbdd80000040300483046022100c80267a5171b2e9c3f485ad734e7e1c70a143bc33ee85efdedb73da27be1deed022100a005246370b03eb7173bd09d410b9ce77c59063713299b27b7611ac2013637e7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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