yourlifeiowa.org

Issued by R3

About this certificate

This digital certificate with serial number 04:13:cb:e0:18:79:9b:7a:84:e1:f6:6f:0c:28:af:a3:7c:8e was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=yourlifeiowa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:13:cb:e0:18:79:9b:7a:84:e1:f6:6f:0c:28:af:a3:7c:8e
Serial Number (int): 355185505552592023560747006290315851299982
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ab:c7:8e:6e:52:8a:ff:bd:5e:9b:27:ed:a9:14:45:72:15:6c:64:71
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ca:a7:90:16:ec:bb:e6:b3:76:7c:92:cc:91:58:7d:34:ce:cd:72:49
Fingerprint (sha256): 7e:3e:fe:4f:53:cb:32:50:4a:57:27:12:54:e9:8c:04:1d:ec:4d:a2:d4:70:22:f8:b2:ed:65:8b:63:09:6b:18

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate yourlifeiowa.org

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yourlifeiowa.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1800betsoff.org
attainmentinstitute.com
attainmentinstitute.org
casaiowa.org
childsupport.ia.gov
coalitions.drugfreeinfo.org
dpscareers.com
drugfreeinfo.com
drugfreeinfo.net
drugfreeinfo.org
educateiowa.gov
efile.iowaworkcomp.gov
facilitylocator.drugfreeinfo.org
iahealthlink.gov
iaschoolperformance.gov
iaschoolperformance.org
iowaattorneygeneral.org
iowacourtsonline.com
iowacourtsonline.net
iowacourtsonline.org
iowacultureapp.com
iowacultureapp.org
iowadnr.net
iowadot.org
iowahumanitiescouncil.gov
iowaoutdoorsmagazine.com
iowap2interns.com
iowasourcewater.org
iowatitleguaranty.gov
iowaworkforcedevelopment.gov
iowaworks.gov
iowaworks.org
query.iowasexoffender.org
recoveryiowa.org
resources.iowahistory.org
settlements.regents.iowa.gov
skillediowa.org
stophtiowa.org
whatdrivesyouiowa.com
whatdrivesyouiowa.org
www.1800betsoff.org
www.attainmentinstitute.com
www.attainmentinstitute.org
www.casaiowa.org
www.childsupport.ia.gov
www.cjis.iowa.gov
www.cloud.iowadot.gov
www.dia-hfd.state.ia.us
www.dom.state.ia.us
www.dpscareers.com
www.food.iowa.gov
www.govelect.iowa.gov
www.governor.state.ia.us
www.ia.gov
www.iaschoolperformance.gov
www.iaschoolperformance.org
www.icn.state.ia.us
www.iid.state.ia.us
www.infoiowa.state.ia.us
www.insuranceca.iowa.gov
www.iowabyways.org
www.iowacleanair.gov
www.iowacourtsonline.com
www.iowacourtsonline.net
www.iowacourtsonline.org
www.iowacultureapp.com
www.iowacultureapp.org
www.iowadnr.com
www.iowadnr.net
www.iowadot.org
www.iowagreatplaces.gov
www.iowagtsb.org
www.iowahistory.org
www.iowahush.com
www.iowap2services.com
www.iowareap.com
www.iowaroadsigns.com
www.iowasexoffender.com
www.iowasexoffender.net
www.iowasexoffender.org
www.iowasexoffenders.com
www.iowasexoffenders.net
www.iowasexoffenders.org
www.opmqaservices.iowadot.gov
www.opmservices.iowadot.gov
www.opmtestservices.iowadot.gov
www.stophtiowa.org
www.workforce.iowa.gov
yourlifeiowa.org

Other certificates including the domain name yourlifeiowa.org

(limited to 100 certificates)
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com
yourlifeiowa.com
yourlifeiowa.org
yourlifeiowa.org
yourlifeiowa.com

Certificate

The complete raw certificate details for yourlifeiowa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozUr0B2mAb7C2Tqobw1w
wwiZJlV8GLeOZp+dClsXI8RhFxYZpolbN+Ls98TNrYdlPJQB6hCJ7m5uwo/mNTA8
vgFO7XlFZTdEpHC1/AM6H5HCHyTyicXq+jEzzjCqWM2ycL+OufltwyeEtQzvGAxr
r4pb+zrl/MVPJN2mMWwFW2cAIrgoZ+YyV2BCppqEnjeQweS4lQtgUV/2TMwhzfwI
uD30cNqxxTBPU6Kb4K5hBx4VFRg395zVqKHSzHgAr6OiGGwjwzroMw+Wyr4vZnHX
osulxlfnqFoVB315qnCXNyDttfRyAlGb+HpYda2vjqz7p0wTaExVbW0ZzCTD52He
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355185505552592023560747006290315851299982
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 21:27:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 21:27:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yourlifeiowa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20603063377964655879850804935810234993050481669662002393530914535746901224242669051623423826855224744849368311602810962266853280731821350994776012829929907089431184496349765718258497128820108310089412484734028888622341972565473498623438730841434979978961586752940215579688559736698314312691062087827336552891904604724658476930660022530290244990257475802326516879147762464847884232042559212469258889677656368194046683426625261004230692610451754447664785055272632256623836701069368009208037853444529505838815225536991013603317681983427047103286326995270633343272161501929603267620839365044501950571169153498250010025717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							abc78e6e528affbd5e9b27eda9144572156c6471
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1998 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1800betsoff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attainmentinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attainmentinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casaiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childsupport.ia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coalitions.drugfreeinfo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpscareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugfreeinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugfreeinfo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugfreeinfo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educateiowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efile.iowaworkcomp.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facilitylocator.drugfreeinfo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iahealthlink.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iaschoolperformance.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iaschoolperformance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaattorneygeneral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowacourtsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowacourtsonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowacourtsonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowacultureapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowacultureapp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowadnr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowadot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowahumanitiescouncil.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaoutdoorsmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowap2interns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowasourcewater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowatitleguaranty.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaworkforcedevelopment.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaworks.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowaworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'query.iowasexoffender.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveryiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.iowahistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settlements.regents.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skillediowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stophtiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatdrivesyouiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatdrivesyouiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1800betsoff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.attainmentinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.attainmentinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casaiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.childsupport.ia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cjis.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloud.iowadot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dia-hfd.state.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dom.state.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dpscareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.food.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.govelect.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.governor.state.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ia.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iaschoolperformance.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iaschoolperformance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icn.state.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iid.state.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infoiowa.state.ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insuranceca.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowabyways.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowacleanair.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowacourtsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowacourtsonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowacourtsonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowacultureapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowacultureapp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowadnr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowadnr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowadot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowagreatplaces.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowagtsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowahistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowahush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowap2services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowareap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowaroadsigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowasexoffender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowasexoffender.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowasexoffender.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowasexoffenders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowasexoffenders.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowasexoffenders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opmqaservices.iowadot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opmservices.iowadot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opmtestservices.iowadot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stophtiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workforce.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourlifeiowa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d1eb0172300000403004630440220121ceb20ac4dfd9170eec4116f58d053e17198628cc0b8483fad9d9caf6b055602206eab7616833fc072d7c5883fce3d03ffe53ac49a06c072016d448f57e28425b600770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d1eb017b90000040300483046022100f0b70ae2a8343724ac606f3d4f0818be266600e5cc1b0eba5c9a23897649af1b022100ba6cd72247a86b599b659df34d49f4277f521127c3d47e29dad595f57dcfcb56
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009488b7c55c4d65f0e278ec92034bb119daa6dc7d69695ba0965e4d7cb8d1f7bab8dae7620aa02cf054dccef3f25f32bd7fd7f53749fd16a140aee8229b200e67c28aba981d5d03bdf02bec25a8b38619bf117a81eb55172d25c35bc78163a85df233b44f9cc4ace577369c69bf5eb32415e7e74198cdefdf401d00f062c3199c69f7f5830a474763c4bad233a0a992b1bb77481adb5a56f2b2da1249463c768243e9e7f7b5e445d394b100b2173a63c5e6871f30e68c9c15e6aa1bfebc944d8b04af71683d2ceebcb5237e7e26158d86ad9ba1ec70118fdc0e4e9f3fec83213e0a729c221b5554317f77e051ce803fc4c4117ce6e845b9fd5ec8621126207e3a