5727517264576512-fe4.pantheonsite.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:23:8b:0f:4a:a7:e1:ff:16:41:44:b6:a3:ed:34:fe:13:4c was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=5727517264576512-fe4.pantheonsite.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:23:8b:0f:4a:a7:e1:ff:16:41:44:b6:a3:ed:34:fe:13:4c
Serial Number (int): 273431582727579923808333479340657688318796
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:c9:0d:15:a8:e9:df:c9:b4:7b:80:78:15:b0:6c:9a:4a:f2:ed:fc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ee:de:9b:2c:4c:40:f6:19:67:3a:8f:28:29:2f:29:76:59:66:a9:05
Fingerprint (sha256): 7d:3d:93:db:03:15:12:7b:72:38:3e:e5:63:ba:3a:22:27:7b:66:ca:57:33:94:b2:5f:d6:f9:37:9e:b5:c9:45

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 5727517264576512-fe4.pantheonsite.io

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 5727517264576512-fe4.pantheonsite.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

5727517264576512-fe4.pantheonsite.io
aboriginal.viu.ca
academic.sfsu.edu
adm.viu.ca
art-staging.sfsu.edu
bridgingbarriers.utexas.edu
bryanths.fcps.edu
buildcoinfoundation.org
carrollwsd.com
cbda.engineering.asu.edu
cel.sfsu.edu
chinamedicalboard.org
commons-staging.sfsu.edu
cruiser.mototribe.com
dogwoodes.fcps.edu
education.viu.ca
elsit-staging.sfsu.edu
fitness.asu.edu
gabon.unfpa.org
gambia.unfpa.org
gcc.unfpa.org
georgia.unfpa.org
ghana.unfpa.org
giving.viu.ca
haiti.unfpa.org
handsupforhaiti.org
historydev.rotary.org
holmesms.fcps.edu
honduras.unfpa.org
india.unfpa.org
indonesia.unfpa.org
iraq.unfpa.org
jordan.unfpa.org
kazakhstan.unfpa.org
kenya.unfpa.org
kluge.library.cornell.edu
kosovo.unfpa.org
kyrgyzstan.unfpa.org
lac.unfpa.org
lao.unfpa.org
law.asu.edu
ld4l.org
leonlevyfoundation.org
lesotho.unfpa.org
live.aep.cornell.edu
madagascar.unfpa.org
making-waves.org
malawi.unfpa.org
malaysia.unfpa.org
maldives.unfpa.org
mali.unfpa.org
mauritania.unfpa.org
mk.unfpa.org
moldova.unfpa.org
mongolia.unfpa.org
morocco.unfpa.org
mototribe.com
mozambique.unfpa.org
myanmar.unfpa.org
ombuds.utexas.edu
pbk-staging.sfsu.edu
pointmanofnewburgh.com
ppd-staging.sfsu.edu
procaredentalservicesco.com
public-pantheon.tableau.com
stat.cornell.edu
stewart-trust.org
sustain-staging.sfsu.edu
sustain.sfsu.edu
test.amgiosk.com
texasparents.org
timbertrading.com
trademarks.utexas.edu
ueap.sfsu.edu
ugs.sfsu.edu
upd-staging.sfsu.edu
ur.viu.ca
visualawareness.com
webaccessibility.asu.edu
www.buildcoinfoundation.org
www.cel.sfsu.edu
www.chinamedicalboard.org
www.handsupforhaiti.org
www.hartenergy.com
www.law.asu.edu
www.ld4l.org
www.leonlevy.org
www.mototribe.com
www.ombuds.utexas.edu
www.oneclass.utexas.edu
www.pointmanofnewburgh.com
www.procaredentalservicesco.com
www.stat.cornell.edu
www.texasparents.org
www.timbertrading.com
www.trademarks.utexas.edu
www.visualawareness.com

Other certificates including the domain name 5727517264576512-fe4.pantheonsite.io

(limited to 100 certificates)
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io
5727517264576512-fe4.pantheonsite.io

Certificate

The complete raw certificate details for 5727517264576512-fe4.pantheonsite.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ8jI/2GMzpa/KiPWJd+
i0Hl8rFl/uhj/mNKUBVmMgtTDsv7bk5+AWbzS12q81Tupbco05eulZmC23D8UUv4
eEmszSr4bJscXkD4VgkckzTJZKrUv879NyUIr+x+8XhuLpVL4iDUOXVT4ft5LITv
08M7YmfiOZkMqnTZ9EOsGq0AmxGrgKJjrqHpkwHULaMhHqaEJDamoFTGBqpA609o
6D0djtkjT8ZdZzmiHDvFR3oFRKv2664NXcMAI0fxm/Xf1PHy5fSY8ufE2tmrEvFP
6T2JrbVS6PKFdPfR7QMZ/DiPBvRAH5qVQ57DmNlDCi49fIbDP/okh+nFx9HWK1in
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273431582727579923808333479340657688318796
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-29 03:49:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 03:49:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5727517264576512-fe4.pantheonsite.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23361550883736045252117561803693089703592509698645070918951383796590597008659886483560755272625671268483988209421061467474057620499861510275047191962656742782951637475731951215847874677403828206074367465816500356106235334930297266215451918720905469801690099467991082930429865448850947006543122893739657313377511420669609009789400682934226504918813417107834823244164478974966872859476115300128134587305408319228164253035694533279154609722518512656817529941434978752330906587491180818904626365904647718831036804772190001347747484840760074478159560188624450790820557300819544742635408223689361845510000876184567568443221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ac90d15a8e9dfc9b47b807815b06c9a4af2edfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1983 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5727517264576512-fe4.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboriginal.viu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academic.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adm.viu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'art-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgingbarriers.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bryanths.fcps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildcoinfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrollwsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbda.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cel.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinamedicalboard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commons-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruiser.mototribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogwoodes.fcps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education.viu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elsit-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitness.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gabon.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gambia.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcc.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgia.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghana.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.viu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haiti.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handsupforhaiti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historydev.rotary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holmesms.fcps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honduras.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'india.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indonesia.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iraq.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jordan.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kazakhstan.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenya.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kluge.library.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kosovo.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyrgyzstan.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lac.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lao.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ld4l.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leonlevyfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesotho.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madagascar.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'making-waves.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malawi.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malaysia.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maldives.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mali.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mauritania.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moldova.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mongolia.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morocco.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mototribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mozambique.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myanmar.unfpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ombuds.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbk-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointmanofnewburgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppd-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procaredentalservicesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public-pantheon.tableau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stat.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewart-trust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustain-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustain.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.amgiosk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasparents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timbertrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trademarks.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ueap.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugs.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upd-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ur.viu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visualawareness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webaccessibility.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buildcoinfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cel.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinamedicalboard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handsupforhaiti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hartenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.law.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ld4l.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leonlevy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mototribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ombuds.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oneclass.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pointmanofnewburgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.procaredentalservicesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stat.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texasparents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timbertrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trademarks.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visualawareness.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016eb57dcaf40000040300463044022017faf1ece5778dbc8c9cca087253d059ed45f4c7a7a53e905885de1ca7e43a3802205d3f58684cc403e94066b8bee11aaecb696f6995a13a0e9639f6d8a9b8a2cf7e0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016eb57dcbd40000040300473045022100bc1fd43e63110514efb482f9b2b81b06d3ac5a0cde63954ea80903d40045f49b02202ceab36fb83c773e405eec2e47e02287f1a146901289e62fa033692c2d43e2e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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