bejih.com

Issued by R3

About this certificate

This digital certificate with serial number 03:af:bd:63:ae:53:11:25:3b:29:3e:bc:16:30:08:1d:8a:c7 was issued on by Let's Encrypt.

With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bejih.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:af:bd:63:ae:53:11:25:3b:29:3e:bc:16:30:08:1d:8a:c7
Serial Number (int): 321138013670757829872753640765073341123271
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:fd:9c:5c:25:27:f7:3d:a7:63:fa:00:6a:0c:82:e1:98:41:d4:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ef:d9:c8:b1:84:56:bb:74:eb:14:6c:52:61:06:00:ec:45:bc:71:b0
Fingerprint (sha256): 77:34:fc:fa:f3:1b:1b:2a:3d:17:3f:56:e4:9c:ef:c2:14:e9:f5:68:6e:ea:60:cc:6b:06:0b:be:b1:02:9d:5a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bejih.com

53

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bejih.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aasdsloth.gsm.cornell.edu
accreditation-dev.gatewaycc.edu
activityreport.msf.org
apidevdocs.trinet.com
barber.elitelearning.com
bejih.com
c10.nrostatic.com
cactqa.rutgers.edu
cams.elitelearning.com
ci.boulder.co.us
climdyn.usc.edu
communitytestsite5.uaf.edu
coronavirus.dev.purdue.edu
coronavirus.purdue.edu
coronavirus.vi.gov
dev-national-review.pantheon.io
dp-homepage.usc.edu
drupal.infusionsoft.com
ectvf.rice.edu
enrollment.honors.uga.edu
entrepreneurship.umd.edu
events.parchment.com
gameon.johnsoncontrols.com
harvardheroes.harvard.edu
healthtalks.baptisthealth.com
idea.ipi-singapore.org
interuss.lfprojects3.linuxfoundation.org
joukowsky.brown.edu
ktes.nationalchickencouncil.org
learn.healthgrades.com
m.beready2retire.com
mc-staging-library.web.viu.ca
nolimitcity.gsm.cornell.edu
nrostatic.com
one.toronto.edu
president-search-staging.sfsu.edu
protect.dev.purdue.edu
protect.test.purdue.edu
rd.lls.edu
redesign-mexico.burtsbees.com
stage.nationalparks.org
staging-experiences.acg.aaa.com
summitbrewing.com
test-blog.nobelbiocare.com
test-uwbwww.site1.uwb.edu
tornado-staging.sfsu.edu
tornado.sfsu.edu
www-ccd.usc.edu
www-dev.gccaz.edu
www.bienpartir.nestle.ca
www.harvardheroes.harvard.edu
ying77.krtv.com
zbane.gsm.cornell.edu

Other certificates including the domain name bejih.com

(limited to 100 certificates)
bejih.com
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
aasdsloth.gsm.cornell.edu
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com
aasdsloth.gsm.cornell.edu
bejih.com

Certificate

The complete raw certificate details for bejih.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJ5jCCCM6gAwIBAgISA6+9Y65TESU7KT68FjAIHYrHMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMTYxMjIxMTlaFw0yNDAxMTQxMjIxMThaMBQxEjAQBgNVBAMT
CWJlamloLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMB0p3pr
9MGc3FwIDJAUF87cIzRxax6SLOWsa8863ZcO0/hmQECz4lL0mZhd0nEUNTYu+zO8
L74/FioBJupJpCBrKhK9TcFTv/TPm3y+Hj8tcsFfO1se2TlVSuCViTKnLTrVmcpy
c941+uzXWtPvQfvuPzeEwGi6VJ8bvN5jGky/pf/MmIp9IiLccWd2ETLy/KDDvQVq
hYoIQkrM3yKUbnxh46RHqHSWXu2i4uw3Hj78Ml2Vov2pdWEHgnRZK6ZHIJPJsoT/
wD80I5N23SgJcCkA3b0EeGN2/mzCVYmw1la1aoy8/sm6WgCYjoyjpqfTQwui2Tyb
o1bBPpr2EfMtmVUCAwEAAaOCBxIwggcOMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
mv2cXCUn9z2nY/oAagyC4ZhB1JowHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v
nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s
ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggUZ
BgNVHREEggUQMIIFDIIZYWFzZHNsb3RoLmdzbS5jb3JuZWxsLmVkdYIfYWNjcmVk
aXRhdGlvbi1kZXYuZ2F0ZXdheWNjLmVkdYIWYWN0aXZpdHlyZXBvcnQubXNmLm9y
Z4IVYXBpZGV2ZG9jcy50cmluZXQuY29tghhiYXJiZXIuZWxpdGVsZWFybmluZy5j
b22CCWJlamloLmNvbYIRYzEwLm5yb3N0YXRpYy5jb22CEmNhY3RxYS5ydXRnZXJz
LmVkdYIWY2Ftcy5lbGl0ZWxlYXJuaW5nLmNvbYIQY2kuYm91bGRlci5jby51c4IP
Y2xpbWR5bi51c2MuZWR1ghpjb21tdW5pdHl0ZXN0c2l0ZTUudWFmLmVkdYIaY29y
b25hdmlydXMuZGV2LnB1cmR1ZS5lZHWCFmNvcm9uYXZpcnVzLnB1cmR1ZS5lZHWC
EmNvcm9uYXZpcnVzLnZpLmdvdoIfZGV2LW5hdGlvbmFsLXJldmlldy5wYW50aGVv
bi5pb4ITZHAtaG9tZXBhZ2UudXNjLmVkdYIXZHJ1cGFsLmluZnVzaW9uc29mdC5j
b22CDmVjdHZmLnJpY2UuZWR1ghllbnJvbGxtZW50Lmhvbm9ycy51Z2EuZWR1ghhl
bnRyZXByZW5ldXJzaGlwLnVtZC5lZHWCFGV2ZW50cy5wYXJjaG1lbnQuY29tghpn
YW1lb24uam9obnNvbmNvbnRyb2xzLmNvbYIZaGFydmFyZGhlcm9lcy5oYXJ2YXJk
LmVkdYIdaGVhbHRodGFsa3MuYmFwdGlzdGhlYWx0aC5jb22CFmlkZWEuaXBpLXNp
bmdhcG9yZS5vcmeCKGludGVydXNzLmxmcHJvamVjdHMzLmxpbnV4Zm91bmRhdGlv
bi5vcmeCE2pvdWtvd3NreS5icm93bi5lZHWCH2t0ZXMubmF0aW9uYWxjaGlja2Vu
Y291bmNpbC5vcmeCFmxlYXJuLmhlYWx0aGdyYWRlcy5jb22CFG0uYmVyZWFkeTJy
ZXRpcmUuY29tgh1tYy1zdGFnaW5nLWxpYnJhcnkud2ViLnZpdS5jYYIbbm9saW1p
dGNpdHkuZ3NtLmNvcm5lbGwuZWR1gg1ucm9zdGF0aWMuY29tgg9vbmUudG9yb250
by5lZHWCIXByZXNpZGVudC1zZWFyY2gtc3RhZ2luZy5zZnN1LmVkdYIWcHJvdGVj
dC5kZXYucHVyZHVlLmVkdYIXcHJvdGVjdC50ZXN0LnB1cmR1ZS5lZHWCCnJkLmxs
cy5lZHWCHXJlZGVzaWduLW1leGljby5idXJ0c2JlZXMuY29tghdzdGFnZS5uYXRp
b25hbHBhcmtzLm9yZ4Ifc3RhZ2luZy1leHBlcmllbmNlcy5hY2cuYWFhLmNvbYIR
c3VtbWl0YnJld2luZy5jb22CGnRlc3QtYmxvZy5ub2JlbGJpb2NhcmUuY29tghl0
ZXN0LXV3Ynd3dy5zaXRlMS51d2IuZWR1ghh0b3JuYWRvLXN0YWdpbmcuc2ZzdS5l
ZHWCEHRvcm5hZG8uc2ZzdS5lZHWCD3d3dy1jY2QudXNjLmVkdYIRd3d3LWRldi5n
Y2Nhei5lZHWCGHd3dy5iaWVucGFydGlyLm5lc3RsZS5jYYIdd3d3LmhhcnZhcmRo
ZXJvZXMuaGFydmFyZC5lZHWCD3lpbmc3Ny5rcnR2LmNvbYIVemJhbmUuZ3NtLmNv
cm5lbGwuZWR1MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB
9QSB8gDwAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGLOKXp
xgAABAMARzBFAiA1iR+5741W7GgqMXdtSbM+9MuFC0ZZf0WNW/PB6euzaQIhAJz8
6gCb7bLXimCpJuDta6alLWRZZZoFGLwwV2NGEVmXAHYAdv+IPwq2+5VRwmHM9Ye6
NLSkzbsp3GhCCp/mZ0xaOnQAAAGLOKXqOQAABAMARzBFAiAX62ECRsYJKQN3hRlB
tpGVkhdjq35NNUsaWY2KCsXWEwIhAPnmxPiR4yDwOWGIXThnbdIUOMoDF/E3ofhi
iBQMwHj7MA0GCSqGSIb3DQEBCwUAA4IBAQCypQNDwvZFUskQ7/fBvQlHWRqW1IAw
bAn/4kZyP5X4yG2cB6/CIuDf7RdwUEkphpRUB/+IyyrPHXtfSPw9108au8M01GZP
m7NUy04mKemyNIZl9nTjeQdVa8xR4PfnuF7t6D/4wCmYoXlLx7LRvr17/EfBEmlL
zHwXWNsRuE5twetVTbczMt9tqno+/zpsxGUsWcQzcKRGq2GLSBPysTFv5wfJ2Vaw
UanHWqYLnz1EnGFsz7xbOaUpDWO9xyOpeNcbxtObjaXPYKnAA4iMS1Pk2KF76v/q
Zc2LfW8Mzd2A0LXrYG4ebX7cpH2YKL7/mi8DIWl7fl0L6kbLsg9EKuwy
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSnemv0wZzcXAgMkBQX
ztwjNHFrHpIs5axrzzrdlw7T+GZAQLPiUvSZmF3ScRQ1Ni77M7wvvj8WKgEm6kmk
IGsqEr1NwVO/9M+bfL4ePy1ywV87Wx7ZOVVK4JWJMqctOtWZynJz3jX67Nda0+9B
++4/N4TAaLpUnxu83mMaTL+l/8yYin0iItxxZ3YRMvL8oMO9BWqFighCSszfIpRu
fGHjpEeodJZe7aLi7DcePvwyXZWi/al1YQeCdFkrpkcgk8myhP/APzQjk3bdKAlw
KQDdvQR4Y3b+bMJVibDWVrVqjLz+ybpaAJiOjKOmp9NDC6LZPJujVsE+mvYR8y2Z
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321138013670757829872753640765073341123271
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 12:21:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 12:21:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bejih.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295278889261962340330570593076765092564594026629510040566849443941721212705222905469227342749655760761925628146467776896918161669177237506061638055976839317974540229085566909601290432792766688540743857041618507082302908209321494362376641574366690514136936988276436757394515726000349835912320682069511736058985263380188984941851626522348036976567257123937402752130277851931257557691396509910741392947845349707974538616547869499133806197294376341097227039876415788275764051935080580783290065738507278734728703160147978353048962982659390140744073959855669537306275821116832669307766091573181749448001568724078979553621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9afd9c5c2527f73da763fa006a0c82e19841d49a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1296 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aasdsloth.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accreditation-dev.gatewaycc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activityreport.msf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidevdocs.trinet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barber.elitelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bejih.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c10.nrostatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cactqa.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cams.elitelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.boulder.co.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climdyn.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communitytestsite5.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronavirus.dev.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronavirus.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronavirus.vi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-national-review.pantheon.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp-homepage.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drupal.infusionsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ectvf.rice.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrollment.honors.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entrepreneurship.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.parchment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameon.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvardheroes.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthtalks.baptisthealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idea.ipi-singapore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interuss.lfprojects3.linuxfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joukowsky.brown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ktes.nationalchickencouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.healthgrades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beready2retire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mc-staging-library.web.viu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nolimitcity.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrostatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.toronto.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'president-search-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protect.dev.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protect.test.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rd.lls.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redesign-mexico.burtsbees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nationalparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-experiences.acg.aaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summitbrewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-blog.nobelbiocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-uwbwww.site1.uwb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tornado-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tornado.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ccd.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.gccaz.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bienpartir.nestle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harvardheroes.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ying77.krtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zbane.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b38a5e9c60000040300473045022035891fb9ef8d56ec682a31776d49b33ef4cb850b46597f458d5bf3c1e9ebb3690221009cfcea009bedb2d78a60a926e0ed6ba6a52d6459659a0518bc3057634611599700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b38a5ea390000040300473045022017eb610246c609290377851941b69195921763ab7e4d354b1a598d8a0ac5d613022100f9e6c4f891e320f03961885d38676dd21438ca0317f137a1f86288140cc078fb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b2a50343c2f64552c910eff7c1bd0947591a96d480306c09ffe246723f95f8c86d9c07afc222e0dfed177050492986945407ff88cb2acf1d7b5f48fc3dd74f1abbc334d4664f9bb354cb4e2629e9b2348665f674e37907556bcc51e0f7e7b85eede83ff8c02998a1794bc7b2d1bebd7bfc47c112694bcc7c1758db11b84e6dc1eb554db73332df6daa7a3eff3a6cc4652c59c43370a446ab618b4813f2b1316fe707c9d956b051a9c75aa60b9f3d449c616ccfbc5b39a5290d63bdc723a978d71bc6d39b8da5cf60a9c003888c4b53e4d8a17beaffea65cd8b7d6f0ccddd80d0b5eb606e1e6d7edca47d9828beff9a2f0321697b7e5d0bea46cbb20f442aec32