brassunion.com

Issued by R3

About this certificate

This digital certificate with serial number 03:83:f4:25:eb:f7:aa:8f:2e:1a:58:23:3d:52:82:13:c9:6f was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=brassunion.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:f4:25:eb:f7:aa:8f:2e:1a:58:23:3d:52:82:13:c9:6f
Serial Number (int): 306238376393867362460127055744341040679279
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 03:03:eb:dd:16:ab:93:7c:c0:63:2a:5c:fa:76:5b:cb:3d:29:ff:67
Fingerprint (sha256): 7d:3d:ae:bd:e8:53:28:17:8c:50:c6:cb:ef:02:45:99:7d:c7:d3:57:30:66:1b:f8:87:80:42:88:39:54:96:17

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate brassunion.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brassunion.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2.www.upenn.edu
2011.waterfrontoronto.ca
acims.arizona.edu
act.americancouncils.org
admin.mrc.org
admin.rooomy.com
aiq.adisa.org
alpha1.americanancestors.org
alt.test.principal.com
amyrice.religionnews.com
anniversaries.uahs.arizona.edu
application-resource.parttime.carey.jhu.edu
apps.americancouncils.org
ariel.ppld.org
asktico.lib.berkeley.edu
athomejan.digitalsummit.com
autodiscoverla.actorsfund.org
awards.opcw.org
beta-engineering.princeton.edu
bigidea.rutgers.edu
blog.brightfarms.com
brassunion.com
broadway.playhousesquare.org
buyersguide.aaps.org
caldesignlab.berkeley.edu
campaign.ucsc.edu
careers.whittier.edu
chat-rl.web.arizona.edu
chns110.courseresource.yale.edu
chns120.courseresource.yale.edu
chns168.courseresource.yale.edu
citrix.remote.naylor.com
civ.ctd.northwestern.edu
clc.shawnee.edu
club.kjzz.org
cms.legacy.com
connect.iadb.org
cqn-erc.arizona.edu
crmtest.eastdunbarton.gov.uk
d7.cmc.edu
d7store.juilliard.edu
design-engineering.princeton.edu
dev-www2.ofx.com
dev.cee.cornell.edu
dev.ctd.northwestern.edu
dev.ece.cornell.edu
dev.embody.yale.edu
dev.mae.cornell.edu
dev.nebrwesleyan.edu
dev.onlineeducation.psu.edu
dev.wrightlaboratory.yale.edu
dev.wti.yale.edu
devdr.azmex.arizona.edu
dial.sralab.org
dmats.spcs.stanford.edu
ebot200.multidevcom.uaf.edu
ecalso.berkeley.edu
eduhup.com
esw.osu.edu
expeditions.sandiegozoo.org
explore.hunterbusinessschool.edu
exploringthecomplexity.ucdavis.edu
flta.cli.asu.edu
get.pima.edu
gis.archbalt.org
giveto.shawnee.edu
gmi.edu
gtpe.pe.gatech.edu
hcii.cs.cmu.edu
healthsciences.ss.pacific.edu
host2.openminds.com
india-test.generation.org
info.vcfa.edu
it.uahs.arizona.edu
itcatalyst.sfsu.edu
kissingbug.arizona.edu
kubernetes.govdelivery.com
lambda.usc.edu
ldap.cscc.unc.edu
leeanatankersley.com
legacy.bricartsmedia.org
live.ophd.pantheon.berkeley.edu
live.ucdavis.edu
lp.grad.online.udel.edu.help
lp.programs.carey.jhu.edu.help
makinghistory.gwu.edu
marketing.magicsoftware.com
marketingprojects.maryville.edu
mobile-data.skyandtelescope.com
news.ged.com
oldsite.itu.edu
parttime.carey.jhu.edu
pcp.sonoranucedd.fcm.arizona.edu
powertest.ctd.northwestern.edu
programs.carey.jhu.edu
querybuilder.appcelerator.com
rc.library.osu.edu
religion.berkeley.edu
wptblog.org

Other certificates including the domain name brassunion.com

(limited to 100 certificates)
banking-business-review.com
161511-web1.vilcek.org
5693048138760192-fe2.pantheonsite.io
brassunion.com
banking-business-review.com
161511-web1.vilcek.org
161511-web1.vilcek.org
161511-web1.vilcek.org
brassunion.com
5693048138760192-fe2.pantheonsite.io
161511-web1.vilcek.org
160.167.tmcapital.com
afscme57.org
160.167.tmcapital.com
banking-business-review.com
161511-web1.vilcek.org
alldata.com
banking-business-review.com
brassunion.com
5693048138760192-fe2.pantheonsite.io
alldata.com
banking-business-review.com
banking-business-review.com
161511-web1.vilcek.org
2.www.upenn.edu
alldata.com
160.167.tmcapital.com
alldata.com
161511-web1.vilcek.org
banking-business-review.com
banking-business-review.com
alldata.com
alldata.com
161511-web1.vilcek.org
banking-business-review.com
161511-web1.vilcek.org
161511-web1.vilcek.org
alldata.com
161511-web1.vilcek.org
banking-business-review.com
161511-web1.vilcek.org
161511-web1.vilcek.org
alldata.com
161511-web1.vilcek.org
5693048138760192-fe2.pantheonsite.io
160.167.tmcapital.com
banking-business-review.com
banking-business-review.com
alldata.com
banking-business-review.com
alldata.com
161511-web1.vilcek.org
5693048138760192-fe2.pantheonsite.io
brassunion.com
brassunion.com
alldata.com
5693048138760192-fe2.pantheonsite.io
161511-web1.vilcek.org
161511-web1.vilcek.org
banking-business-review.com
banking-business-review.com
161511-web1.vilcek.org
161511-web1.vilcek.org
2.www.upenn.edu
161511-web1.vilcek.org
brassunion.com
alldata.com
161511-web1.vilcek.org
161511-web1.vilcek.org
160.167.tmcapital.com
160.167.tmcapital.com
alldata.com
alldata.com
161511-web1.vilcek.org
161511-web1.vilcek.org
banking-business-review.com
alldata.com
161511-web1.vilcek.org
banking-business-review.com
brassunion.com
brassunion.com
banking-business-review.com
160.167.tmcapital.com
afscme57.org
161511-web1.vilcek.org
banking-business-review.com
160.167.tmcapital.com
afscme57.org
brassunion.com
161511-web1.vilcek.org
161511-web1.vilcek.org
161511-web1.vilcek.org
banking-business-review.com
161511-web1.vilcek.org
161511-web1.vilcek.org
161511-web1.vilcek.org
brassunion.com
161511-web1.vilcek.org
banking-business-review.com
5693048138760192-fe2.pantheonsite.io

Certificate

The complete raw certificate details for brassunion.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306238376393867362460127055744341040679279
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-11 11:59:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 11:59:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brassunion.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2335 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2.www.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2011.waterfrontoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acims.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rooomy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiq.adisa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpha1.americanancestors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alt.test.principal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amyrice.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anniversaries.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'application-resource.parttime.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ariel.ppld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asktico.lib.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athomejan.digitalsummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscoverla.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awards.opcw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-engineering.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigidea.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.brightfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brassunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadway.playhousesquare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyersguide.aaps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caldesignlab.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.whittier.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat-rl.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chns110.courseresource.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chns120.courseresource.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chns168.courseresource.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrix.remote.naylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civ.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clc.shawnee.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'club.kjzz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.legacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.iadb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cqn-erc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmtest.eastdunbarton.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd7.cmc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd7store.juilliard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design-engineering.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www2.ofx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cee.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ece.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.embody.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wrightlaboratory.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wti.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devdr.azmex.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dial.sralab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.spcs.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebot200.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecalso.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduhup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esw.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expeditions.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.hunterbusinessschool.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploringthecomplexity.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flta.cli.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.pima.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveto.shawnee.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmi.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtpe.pe.gatech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcii.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthsciences.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host2.openminds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'india-test.generation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.vcfa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcatalyst.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kissingbug.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubernetes.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambda.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldap.cscc.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leeanatankersley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.bricartsmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.grad.online.udel.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.programs.carey.jhu.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.magicsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingprojects.maryville.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-data.skyandtelescope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.ged.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldsite.itu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parttime.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcp.sonoranucedd.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powertest.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programs.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'querybuilder.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.library.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religion.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wptblog.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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