mail.luthercare.org

- Luthercare -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 67:1e:c5:8f:82:62:b1:1e:b1:54:bd:66 was issued on by GlobalSign nv-sa.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Luthercare

Organization: Luthercare
Organization unit: IS
State / Province: Pennsylvania
Locality: Lititz
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 67:1e:c5:8f:82:62:b1:1e:b1:54:bd:66
Serial Number (int): 31914156739663775332497145190
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 72:0c:58:42:60:fb:b7:c2:14:84:b5:cb:76:a3:ef:b9:4e:db:81:4b
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 2a:b6:dd:8a:74:68:70:23:50:c8:e3:60:63:36:40:10:cc:98:bb:5c
Fingerprint (sha256): 71:31:8d:0a:8f:3f:e4:84:79:d1:88:25:c9:24:52:5b:6e:56:3d:43:db:5f:16:89:96:89:b1:5c:4d:24:90:2d

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate mail.luthercare.org

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.luthercare.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.luthercare.org
mail.greenstoneliving.org
autodiscover.greenstoneliving.org
mail.greenstonemosaic.com
autodiscover.greenstonemosaic.com
scexch01.luthercare.org
lititzexch01.luthercare.org
owa.luthercare.org
autodiscover.luthercare.org

Other certificates including the domain name luthercare.org

(limited to 100 certificates)
LititzDC3.luthercare.org
*.luthercare.org
board.luthercare.org
board.luthercare.org
luthercare.org
exchange1.luthercare.org
webapps.luthercare.org
mail.luthercare.org
luthercare.org
luthercare.org
luthercare.org
luthercare.org
exchange1.luthercare.org
webapps.luthercare.org
luthercare.org
luthercare.org
lititzexch01.luthercare.org
storefront.luthercare.org
mail.luthercare.org
luthercare.org
www.luthercare.org
exchange1.luthercare.org
mail.luthercare.org
webapps.luthercare.org
luthercare.org
luthercare.org
luthercare.org
luthercare.org
luthercare.org
board.luthercare.org
lititzexch01.luthercare.org
mail.luthercare.org
webapps.luthercare.org
webapps.luthercare.org

Certificate

The complete raw certificate details for mail.luthercare.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHfTCCBmWgAwIBAgIMZx7Fj4JisR6xVL1mMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMTA0MzAxOTA4MjNaFw0y
MjA2MDExOTA4MjNaMHUxCzAJBgNVBAYTAlVTMRUwEwYDVQQIEwxQZW5uc3lsdmFu
aWExDzANBgNVBAcTBkxpdGl0ejELMAkGA1UECxMCSVMxEzARBgNVBAoTCkx1dGhl
cmNhcmUxHDAaBgNVBAMTE21haWwubHV0aGVyY2FyZS5vcmcwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQC0REy9iX7wGhGLUFyUnEo+aQxPqVC3WTlaDMYx
rmYWOQeQWuE5WqaGokh6F2p/WH1xBS97d1LrfhXV1wlmaQJUI8jIvB/rtsw5mpp0
tnTHn6NqDpnmFBLTcAkEg2sRENgmtADjONUG53Eh+luJwHi7Asr+v/i/ykjhNtET
iYPTyvsAKUjaAGnmURt9acP+9TfeNwHQeEWXP3MQdfZcrHZpmhEMMoB+T7tL+i6/
pv042tJscpatEmxwjFqrkOctM5Oards6ecsWTYzkoUlFZtRO4I6f6PmCYe67cu15
VX9jvSZsm3+AUyb3krPvqVY0BUvQVfENGgW3YxZN6Lo2X6tBAgMBAAGjggQwMIIE
LDAOBgNVHQ8BAf8EBAMCBaAwgY4GCCsGAQUFBwEBBIGBMH8wRAYIKwYBBQUHMAKG
OGh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzcnNhb3Zzc2xj
YTIwMTguY3J0MDcGCCsGAQUFBzABhitodHRwOi8vb2NzcC5nbG9iYWxzaWduLmNv
bS9nc3JzYW92c3NsY2EyMDE4MFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYI
KwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkv
MAgGBmeBDAECAjAJBgNVHRMEAjAAMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9j
cmwuZ2xvYmFsc2lnbi5jb20vZ3Nyc2FvdnNzbGNhMjAxOC5jcmwwggEDBgNVHREE
gfswgfiCE21haWwubHV0aGVyY2FyZS5vcmeCGW1haWwuZ3JlZW5zdG9uZWxpdmlu
Zy5vcmeCIWF1dG9kaXNjb3Zlci5ncmVlbnN0b25lbGl2aW5nLm9yZ4IZbWFpbC5n
cmVlbnN0b25lbW9zYWljLmNvbYIhYXV0b2Rpc2NvdmVyLmdyZWVuc3RvbmVtb3Nh
aWMuY29tghdzY2V4Y2gwMS5sdXRoZXJjYXJlLm9yZ4IbbGl0aXR6ZXhjaDAxLmx1
dGhlcmNhcmUub3JnghJvd2EubHV0aGVyY2FyZS5vcmeCG2F1dG9kaXNjb3Zlci5s
dXRoZXJjYXJlLm9yZzAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYD
VR0jBBgwFoAU+O9/8s14Z6jeb48kjYjxhwMCs+swHQYDVR0OBBYEFHIMWEJg+7fC
FIS1y3aj77lO24FLMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgBvU3asMfAx
GdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAXkkLptdAAAEAwBHMEUCIQCMQ+XQ
FnW9kjz5T7A6y/dePoU+q5oj9as7ff/AA7c7FgIgUGqKWb+JNjxCHQWqRXt7aKoS
8IC11uhA1c74kCT62NEAdQApeb7wnjk5IfBWc59jpXflvld9nGAK+PlNXSZcJV3H
hAAAAXkkLptWAAAEAwBGMEQCIBuNZkom0ZVqk1wQ15iAHLwBZUxT77qnFLm/SFIM
0c+RAiAsA5UDf53kfPcB69LDwmYcxQ29WR5InuCTylh3HVhmWQB2AFWB1MIWkDYB
SuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABeSQum38AAAQDAEcwRQIhAM5gEgsc
3viwhdc2BFa+AntqXmQATtYICL74cOBJVdOpAiAGTVZgNmI/ENzE4OQ8vTGvL4Nk
AxPCjpGWpegrBr1GdjANBgkqhkiG9w0BAQsFAAOCAQEAIEEHRtOqw0zOtUbosXe3
5TGK1TvRcoy1mV5xWR7xzav3k1tEcMhmn/XH2NOhroH3jIHpzmooXVmPPiGUtdlk
aCliSAOb+Z1rg5U4Rc//FlBj6kPmGjckNkvPrUweEFvADZj4uMngUC88Xlg3DCYT
UDc8RBqbySMuzZEZXqj/TpGZotlwobVSIgxEPWcIUnEZ8PNM0D2lnUy435ZVJxzx
BNzeieGniN/rqeu8SGUBAZw83CWV1+Jo5v8Mb4KouoSEOU1zPqXPIk5r6TeTNMBE
Fonnbxt7vWjXBEMzWkaC0WqO/oEmnhNHBnMadsh2GGrXTG19Y30uVAlElNLVgPHa
hg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtERMvYl+8BoRi1BclJxK
PmkMT6lQt1k5WgzGMa5mFjkHkFrhOVqmhqJIehdqf1h9cQUve3dS634V1dcJZmkC
VCPIyLwf67bMOZqadLZ0x5+jag6Z5hQS03AJBINrERDYJrQA4zjVBudxIfpbicB4
uwLK/r/4v8pI4TbRE4mD08r7AClI2gBp5lEbfWnD/vU33jcB0HhFlz9zEHX2XKx2
aZoRDDKAfk+7S/ouv6b9ONrSbHKWrRJscIxaq5DnLTOTmq3bOnnLFk2M5KFJRWbU
TuCOn+j5gmHuu3LteVV/Y70mbJt/gFMm95Kz76lWNAVL0FXxDRoFt2MWTei6Nl+r
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 31914156739663775332497145190
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-30 19:08:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-01 19:08:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lititz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luthercare'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.luthercare.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22756574764316740206072050049449443114143894696492784567472866081389963604324736674749481728699761302321274579411564810223798397796379352301439982185841378156420017364330438445189614515062067637481557396406396882576177767833686816254673116654462820656218431320203426758457520926052393919449402485081661221869364382605217703242914085649217665885486249558244305520966650112498376907022952118174382168479565636537861313332602677630398137866582220723950405748053298751104880834397689545241016569027395236564629953546221059926448900667236449540125323292472505222276145302184946755229113846105672366295409917175640878984001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (251 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.luthercare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.greenstoneliving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.greenstoneliving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.greenstonemosaic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.greenstonemosaic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scexch01.luthercare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lititzexch01.luthercare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.luthercare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.luthercare.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							720c584260fbb7c21484b5cb76a3efb94edb814b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000179242e9b5d00000403004730450221008c43e5d01675bd923cf94fb03acbf75e3e853eab9a23f5ab3b7dffc003b73b160220506a8a59bf89363c421d05aa457b7b68aa12f080b5d6e840d5cef89024fad8d10075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000179242e9b56000004030046304402201b8d664a26d1956a935c10d798801cbc01654c53efbaa714b9bf48520cd1cf9102202c0395037f9de47cf701ebd2c3c2661cc50dbd591e489ee093ca58771d5866590076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000179242e9b7f0000040300473045022100ce60120b1cdef8b085d7360456be027b6a5e64004ed60808bef870e04955d3a90220064d566036623f10dcc4e0e43cbd31af2f83640313c28e9196a5e82b06bd4676
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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