www.gim.utoronto.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:9e:ac:23:98:fa:f1:00:0a:3b:56:c4:f2:9f:cd:b9:3d:91 was issued on by Let's Encrypt.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.gim.utoronto.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:ac:23:98:fa:f1:00:0a:3b:56:c4:f2:9f:cd:b9:3d:91
Serial Number (int): 315330283817261957735496547981484139036049
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 20:df:58:f9:ac:30:6f:1e:60:e5:87:3b:ae:9b:68:9a:36:96:69:26
Fingerprint (sha256): 7e:12:0b:97:0d:ce:28:14:0c:ad:10:c4:ec:1d:8e:fc:ba:a3:b5:22:a1:c4:3f:35:9b:fa:f8:b8:6a:1e:d9:81

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.gim.utoronto.ca

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gim.utoronto.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gim.utoronto.ca
www.giving.dartmouth.edu
www.grrc.az.gov
www.gs.utexas.edu
www.hcii.cs.cmu.edu
www.home.lhs.berkeley.edu
www.ihe.uga.edu
www.inas2.uga.edu
www.international.arizona.edu
www.internationaladmissions.arizona.edu
www.jhpiego.jhu.edu
www.lgcr.com
www.lhs.berkeley.edu
www.libertytreefoundation.org
www.marketing.arizona.edu
www.materialgirlcollection.com
www.molecularbiosci.utexas.edu
www.museconnect.arizona.edu
www.nartc.fcm.arizona.edu
www.newpiper.com
www.odee-pgmo.osu.edu
www.ol.rutgers.edu
www.online.foodsafety.msu.edu
www.onlinecso.dshs.wa.gov
www.onlineeducation.psu.edu
www.ordbc.arizona.edu
www.projectrequest.axway.com
www.projectshare.sfsu.edu
www.randybryceforcongress.com
www.readiness.osu.edu
www.resx.usc.edu
www.reveal.uky.edu
www.sisterstory.org
www.spain.uga.edu
www.sph.berkeley.edu
www.ss.pacific.edu
www.stopbreathethink.com
www.strength.org
www.studentmedia.arizona.edu
www.studyabroad.arizona.edu
www.summer-winter.arizona.edu
www.swcsc.arizona.edu
www.uaatwork.arizona.edu
www.universityextension.ucdavis.edu
www.urocitk.com
www.vpr.arizona.edu
www1.ccny.cuny.edu
www2.ccny.cuny.edu
www2.doctorswithoutborders.org
www2.familycenter.upenn.edu
www2.finance.upenn.edu
www2.naco.org
www2.president.usc.edu
www2.provost.upenn.edu
www2.stkate.edu
x17my.ctd.northwestern.edu
yqss.kjzz.org

Other certificates including the domain name utoronto.ca

(limited to 100 certificates)
test-web-lws.edu.help
5639445604728832-fe3.pantheonsite.io
theta.utoronto.ca
5176288276905984-fe4.pantheonsite.io
statuspage.io
www.summerdrama.utoronto.ca
5641826627223552-fe3.pantheonsite.io
schoolofcities.utoronto.ca
spep.phm.utoronto.ca
statuspage.io
admissions.emeritus.org
www.moleculargenetics.utoronto.ca
uoftmedmagazine.utoronto.ca
ucdc.edu
prod.engineering.utoronto.ca
lecturecast-beta.utsc.utoronto.ca
drones.utias.utoronto.ca
cip.utoronto.ca
nartc.fcm.arizona.edu
www.bmc.med.utoronto.ca
dev.engineering.utoronto.ca
uas.utoronto.ca
www.cvdmc.utoronto.ca
prostatus.whitepages.com
5665370564198400-fe2.pantheonsite.io
az-eis-wp-linux.si.utoronto.ca
postbox.ecf.utoronto.ca
*.provost.utoronto.ca
asu.ksby.com
statuspage.io
dev.engineering.utoronto.ca
sta288.artsci.utoronto.ca
statuspage.io
ctl.utsc.utoronto.ca
trailab.utias.utoronto.ca
stmikes.utoronto.ca
*.teach.cs.toronto.edu
5692331952963584-fe4.pantheonsite.io
5761901967441920-fe1.pantheonsite.io
5722383033827328-fe1.pantheonsite.io
5639445604728832-fe3.pantheonsite.io
statuspage.io
mediacat.utsc.utoronto.ca
ngsis-sit-db.easi.utoronto.ca
test.eis.uw.edu
universe.utoronto.ca
srs.easi.utoronto.ca
forms.act.utoronto.ca
planetrocks.utsc.utoronto.ca
5639445604728832-fe3.pantheonsite.io
www.design-engineering.princeton.edu
preview.utoronto.ca
sec.utoronto.ca
www.nal.utoronto.ca
billgrahamcentre.utoronto.ca
5685570869133312-fe1.pantheonsite.io
nxterra.ucop.edu
bar.utoronto.ca
5639445604728832-fe3.pantheonsite.io
statuspage.io
statuspage.io
weblogin.utoronto.ca
teaching.utoronto.ca
ANTENNA.APSC.utoronto.ca
alumni.utoronto.ca
5666823336886272-fe4.pantheonsite.io
nextcloud-old2.utsc.utoronto.ca
5741384237580288-fe1.pantheonsite.io
5741384237580288-fe1.pantheonsite.io
mediabank.utoronto.ca
araport.org
idpz.utorauth.utoronto.ca
statuspage.io
statuspage.io
faculty100.music.utoronto.ca
concordia.oise.utoronto.ca
medina.ferber.psych.utoronto.ca
www.pjk.atmosp.physics.utoronto.ca
sesu-jobe.utoronto.ca
bbtsapps.ads.utm.utoronto.ca
statuspage.io
www.blogs.earthjustice.org
www.facultyclub.utoronto.ca
safety.utoronto.ca
future.utoronto.ca
5639445604728832-fe3.pantheonsite.io
barense.psych.utoronto.ca
5641826627223552-fe3.pantheonsite.io
www.oncologyce.utoronto.ca
2021convention.ncte.org
moleculargenetics.utoronto.ca
fastech.iit.artsci.utoronto.ca
future.utoronto.ca
spontaneousgenerations.library.utoronto.ca
lampstatus.utoronto.ca
www.studygroups.artsci.utoronto.ca
ulearn.utoronto.ca
dev.research.utoronto.ca
green.faculty.politics.utoronto.ca
webdev.colorado.edu

Certificate

The complete raw certificate details for www.gim.utoronto.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315330283817261957735496547981484139036049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-20 10:55:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-18 10:55:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gim.utoronto.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1386 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gim.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giving.dartmouth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grrc.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gs.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcii.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.home.lhs.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihe.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inas2.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.international.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internationaladmissions.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhpiego.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lgcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lhs.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertytreefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketing.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.materialgirlcollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.molecularbiosci.utexas.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.museconnect.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newpiper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odee-pgmo.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ol.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.online.foodsafety.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinecso.dshs.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ordbc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectrequest.axway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projectshare.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.randybryceforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readiness.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reveal.uky.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sisterstory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spain.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sph.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stopbreathethink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strength.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studentmedia.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studyabroad.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summer-winter.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swcsc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uaatwork.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universityextension.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.urocitk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vpr.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.ccny.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.familycenter.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.finance.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.naco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.president.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.provost.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.stkate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x17my.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yqss.kjzz.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000183f53fed9a000004030047304502202b53cc51db1824f2270fe61ac13801cd199c5df1c686b3821169d9b5167e6af802210090a130b4e71ec50bf00559d52a71037f3b93806705307a6bfab1be42f5995f36007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000183f53fed8d00000403004630440220419cad7a93b443787f2cb5d67d14001847c9e0d9f9030378ada1207609d19a3e02203160881ef9cdc6add1ce869f784c3f6dbb4c4016c2158988224573c7bd8c3e07
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007a4d07dd10ac30299e2aef7418c902557564edd5ae003964e1548a7ddc0765c23b3c9c263627f1d55d5d7cc5302892e06dc8d46c67ffdc8fbe87d058aa95e52127a24dc0e9fe07f3767dce7c82402909b2486684fce46c4215faa58144c4b4eb8cef3fa24be0f73e5716cdcc666e11816d4db37387e63fcfafd5103ec0d4d601a897015e33be25fbac3c4e48041adfb7584128b093fc4d255d203dc459c28be910728db09596ab013ef90c02774969be8571c0b4673303b2ed3a3e97ec62f9ba1fc3d8d5e5d236df67cbc252ca9fbbc9ae128c6bd858bf3a76d6b64d5fe3b44bc4d8f49101e49eb9a9364615d2d2dc449e6e3ac61d8f16f195d311923417cdc3