yourlifeiowa.org

Issued by R3

About this certificate

This digital certificate with serial number 04:f0:7a:4d:bf:4c:93:5f:14:80:1b:12:ed:32:9c:6c:7c:d9 was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=yourlifeiowa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f0:7a:4d:bf:4c:93:5f:14:80:1b:12:ed:32:9c:6c:7c:d9
Serial Number (int): 430279481290417268625687370630453007252697
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3e:34:a1:d5:27:7f:35:5e:0b:55:ed:42:3e:c6:3c:70:b1:c7:dc:48
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 56:78:a6:74:4c:4c:32:47:52:79:b0:78:3f:7c:43:32:8e:96:74:5c
Fingerprint (sha256): 79:ad:f1:f1:82:8e:47:96:70:d0:44:9e:50:2d:0f:b4:33:86:8d:a0:e7:0c:37:f0:f3:24:02:75:8e:48:e0:49

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate yourlifeiowa.org

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yourlifeiowa.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1800betsoff.org
childsupport.ia.gov
coalitions.drugfreeinfo.org
cultureiowa.com
cultureiowa.org
dpscareers.com
drugfreeinfo.com
drugfreeinfo.net
drugfreeinfo.org
educateiowa.gov
facilitylocator.drugfreeinfo.org
iahealthlink.gov
iaschoolperformance.gov
iaschoolperformance.org
iowaartssummit.com
iowaattorneygeneral.org
iowacourtsonline.com
iowacourtsonline.net
iowacourtsonline.org
iowaculturalaffairs.com
iowaculturalaffairs.net
iowaculturalaffairs.org
iowaculture.com
iowaculture.net
iowaculture.org
iowacultureapp.com
iowacultureapp.org
iowadot.org
iowafinanceauthority.gov
iowagreatplaces.com
iowagreatplaces.org
iowahumanitiescouncil.gov
iowaoutdoorsmagazine.com
iowap2interns.com
iowasourcewater.org
iowatitleguaranty.gov
iowaworks.gov
iowaworks.org
preserveiowasummit.com
preserveiowasummit.org
produceiowa.com
produceiowa.net
produceiowa.org
query.iowasexoffender.org
recoveryiowa.org
resources.iowahistory.org
skillediowa.org
stophtiowa.org
thefilmlounge.org
www.1800betsoff.org
www.childsupport.ia.gov
www.cjis.iowa.gov
www.culturalaffairs.org
www.dia-hfd.state.ia.us
www.dom.state.ia.us
www.dpscareers.com
www.food.iowa.gov
www.govelect.iowa.gov
www.governor.state.ia.us
www.ia.gov
www.iaschoolperformance.gov
www.iaschoolperformance.org
www.icn.state.ia.us
www.iid.state.ia.us
www.infoiowa.state.ia.us
www.insuranceca.iowa.gov
www.iowaartscouncil.org
www.iowaartssummit.com
www.iowabyways.org
www.iowacleanair.gov
www.iowacourtsonline.com
www.iowacourtsonline.net
www.iowacourtsonline.org
www.iowacultureapp.com
www.iowacultureapp.org
www.iowadnr.com
www.iowadnr.net
www.iowadot.gov
www.iowadot.org
www.iowafinanceauthority.gov
www.iowagreatplaces.gov
www.iowagtsb.org
www.iowahistory.org
www.iowahush.com
www.iowap2services.com
www.iowareap.com
www.iowaroadsigns.com
www.iowasexoffender.com
www.iowasexoffender.net
www.iowasexoffender.org
www.iowasexoffenders.com
www.iowasexoffenders.net
www.iowasexoffenders.org
www.preserveiowasummit.com
www.preserveiowasummit.org
www.stophtiowa.org
yourlifeiowa.org

Other certificates including the domain name yourlifeiowa.org

(limited to 100 certificates)
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com

Certificate

The complete raw certificate details for yourlifeiowa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P6oXmm62+d3jnhGruGw
bbFsyIps1OR4Udlu9+LqfBlQzdA+mCbPOxVH0J4ik78nEy51B0I9TkAMVuuW8DIw
ZMpuYZslf29XSEKUKPHTWPoJUGDHJr9dF4Oi302YiwIZaU4Ae7P3eL/FVsV18Y3x
OgjYVX04a/eT9s5IrAgyPagdQ5h2ERMhBvW59QA7b7kEsFsXXT1IG39z76M7B3b5
n3BCzN3oqzEKlOfwRRbnMbwpM8DhbXxBpxl6fNhUWi0McmM8Se4UxTbdU4C47cTY
P4RhyvQ5i4+ByO7/Gn2r+GjwfKsKujC88SVulMZRcixcon2FsLiWalK9/esFe8AN
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 430279481290417268625687370630453007252697
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-01 18:17:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-29 18:17:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yourlifeiowa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26888097040349235100793341529655909424644999125878803358536338646738546738712837384474483729289448137014985035826932932053260928456329244344624904700187552296658162853569456831520337276397678137547908696191138620459965353909435089728951923316866188680344604543001509204405919001510850556248482357172754478762095210312391138178882111446842294819989818461275839734717213291886469110028655464427436005729437326716964071458179005968466994978095317527069010170762322881215573770638185581160031919816652826590812283208125744816680848188565327629845364041284167387155813128762494912389213515790539896912529134811258189516273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e34a1d5277f355e0b55ed423ec63c70b1c7dc48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1800betsoff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childsupport.ia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coalitions.drugfreeinfo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cultureiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cultureiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpscareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugfreeinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugfreeinfo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugfreeinfo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educateiowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facilitylocator.drugfreeinfo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iahealthlink.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iaschoolperformance.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iaschoolperformance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaartssummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaattorneygeneral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowacourtsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowacourtsonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowacourtsonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaculturalaffairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaculturalaffairs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaculturalaffairs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaculture.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaculture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowacultureapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowacultureapp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowadot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowafinanceauthority.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowagreatplaces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowagreatplaces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowahumanitiescouncil.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaoutdoorsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowap2interns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowasourcewater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowatitleguaranty.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaworks.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preserveiowasummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preserveiowasummit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'produceiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'produceiowa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'produceiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'query.iowasexoffender.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.iowahistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skillediowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stophtiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefilmlounge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1800betsoff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.childsupport.ia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cjis.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culturalaffairs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dia-hfd.state.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dom.state.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dpscareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.food.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.govelect.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.governor.state.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iaschoolperformance.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iaschoolperformance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icn.state.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iid.state.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infoiowa.state.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insuranceca.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowaartscouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowaartssummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowabyways.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowacleanair.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowacourtsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowacourtsonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowacourtsonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowacultureapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowacultureapp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowadnr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowadnr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowadot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowadot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowafinanceauthority.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowagreatplaces.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowagtsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowahistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowahush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowap2services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowareap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowaroadsigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowasexoffender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowasexoffender.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowasexoffender.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowasexoffenders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowasexoffenders.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowasexoffenders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preserveiowasummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preserveiowasummit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stophtiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourlifeiowa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000181bb326ab30000040300463044022062f101f1719b86e85f275b55389527f5a89bc78a75c5345c6c714055772d283902202492dbeb3f9f077fc83d60f0c96ee21e8aae43d00e1bc9e16712ecd527d5a5f30075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000181bb326a93000004030046304402205cc4a2611416a4f674edd2e4241a95b20a08ca2c0fba44f52baaad3100e9f90d0220015aecb1954c0823684c3467419faa5c27b5201f0387ce00d7f0e8b867ea3f49
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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