kim.lovelace.shiatsusociety.org

Issued by R3

About this certificate

This digital certificate with serial number 04:33:5b:b1:77:f5:89:39:6b:93:b3:93:f4:db:c2:6c:85:76 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kim.lovelace.shiatsusociety.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:33:5b:b1:77:f5:89:39:6b:93:b3:93:f4:db:c2:6c:85:76
Serial Number (int): 365925425657229347745730809799172439180662
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9a:fd:9c:5c:25:27:f7:3d:a7:63:fa:00:6a:0c:82:e1:98:41:d4:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 45:bb:ca:46:d8:e0:fb:0e:b4:aa:a8:ff:83:e8:d9:f6:71:e7:87:32
Fingerprint (sha256): 7e:d7:07:6c:76:69:71:fe:4e:3f:13:af:b5:e0:80:2f:3b:ff:82:8b:d8:f4:a0:ef:23:a0:cb:51:47:2a:90:ad

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kim.lovelace.shiatsusociety.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kim.lovelace.shiatsusociety.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kim.lovelace.shiatsusociety.org
kubernetes.govdelivery.com
laborlabsandbox.aflcio.org
landing.pacific.edu
law.ss.pacific.edu
ldap.cscc.unc.edu
liberalarts.ss.pacific.edu
libre.estadio.com
lindsay.mcny.org
live.aep.cornell.edu
live.bme.cornell.edu
live.cam.cornell.edu
live.mcgeorge.edu
live.ophd.pantheon.berkeley.edu
live.ucdavis.edu
m.religionnews.com
m.voiceofsandiego.org
macaugaming.gsm.cornell.edu
mailams.ustelecom.org
makinghistory.gwu.edu
marketing.magicsoftware.com
mediaroom.livestrong.org
memberauth.audiology.org
microsites.globalwaters.org
mobilize.medika.life
mpo.gsm.cornell.edu
msa2016.berkeley.edu
multidev1.gc.cuny.edu
nartc.fcm.arizona.edu
nartechedge.nar.realtor
news.catholicschoolsbq.org
news.religionnews.com
newsite.as-coa.org
next.warnerpacific.edu
noticias.lared.cl
null.actorsfund.org
odl.rutgers.edu
oksy.fronterasdesk.org
old.gistnetwork.org
oldsite.itu.edu
om.sterling.edu
online.foodsafety.msu.edu
pharmacy.ss.pacific.edu
pianolive.americamagazine.org
post-wp.religionnews.com
ppr.erdf.appcelerator.com
preview.dfa.cornell.edu
prod-www.chop.edu
programs.alvernia.edu
ps-pantheon.umdearborn.edu
psp.sandiegozoo.org
pubsrv.eforms.asu.edu
querybuilder.appcelerator.com
radsafe.berkeley.edu
rc.library.osu.edu
redesignhealthcare.mclaren.org
redirects.policy.cornell.edu
religion.berkeley.edu
requestgem.business.ucdenver.edu
resx.usc.edu
reweb.archbalt.org
rgd2020.rutgers.edu
rheumatology.utoronto.ca
rmp.rutgers.edu
rpgp.berkeley.edu
rstinstruments.rstinstruments.com
rstinstrumentsinfo.rstinstruments.com
ruby-staging.vilcek.org
scilsresx.rutgers.edu
sdgs-staging.scout.org
secure.tu.org
sexgenderlab.human.cornell.edu
slot.pbn-a56.rockhurst.edu
smtp.commonsensemedia.org
social.davidson.edu
sourceu.warnerpacific.edu
stage.onlineeducation.psu.edu
staging-na.altran.com
staging.freedomworks.org
stanfordsummersession.stanford.edu
states.drugpolicy.org
static5.bisparks.org
stfincrease.unlv.edu
store.actorsfund.org
summercollegeacademy.stanford.edu
support.doctorswithoutborders.org
sv3.presidio.edu
swfwmd.state.fl.us
system.religionnews.com
t.wholegrainscouncil.org
tango.franklin.uga.edu
technoculturalstudies.ucdavis.edu
test.aep.cornell.edu
test.cam.cornell.edu
test.cee.cornell.edu
test.cochise.az.gov
test.efc.ny.gov
test.ethics3.pantheon.berkeley.edu
test.makinghistory.gwu.edu
test.ocio.osu.edu

Other certificates including the domain name shiatsusociety.org

(limited to 100 certificates)
it.uahs.arizona.edu
hub.meed.com
good.gsm.cornell.edu
host2.openminds.com
inside.gc.cuny.edu
shiatsusociety.co.uk
shiatsusociety.org
junk.dana.org
shiatsusociety.co.uk
shiatsusociety.co.uk
intranet.olivecrest.org
d7.cmc.edu
info-dev.calperformances.org
internal.gcir.org
junk.dana.org
d7.cmc.edu
international.research.ucsb.edu
csc.arizona.edu
csc.arizona.edu
international.research.ucsb.edu
csc.arizona.edu
junk.dana.org
www.shiatsusociety.org
ipv6.earthjustice.org
design-engineering.princeton.edu
gws-uat.earthjustice.org
host2.cenmi.org
connect.iadb.org
alternatif.dev.oceana.org
d7store.juilliard.edu
info.vcfa.edu
info-dev.calperformances.org
internetcouncil.nacha.org
inside.gc.cuny.edu
connect.iadb.org
kgqm.kjzz.org
shiatsusociety.co.uk
junk.dana.org
covid.usmle.org
csc.arizona.edu
infonet.fia.org
covid.usmle.org
httpbin.earthjustice.org
internal.gcir.org
csc.arizona.edu
shiatsusociety.org
jp.mcny.org
kim.lovelace.shiatsusociety.org
*.shiatsusociety.org
junk.dana.org
jp.mcny.org
d7.cmc.edu
www.shiatsusociety.org
kim.lovelace.shiatsusociety.org
d7store.juilliard.edu
hub.meed.com
kim.lovelace.shiatsusociety.org
ip.earthjustice.org
d7.cmc.edu
shiatsusociety.co.uk
info.vcfa.edu
intranet.olivecrest.org
*.shiatsusociety.org
*.shiatsusociety.org
internetcouncil.nacha.org
*.shiatsusociety.org
iam.earthjustice.org
industri40.ida.dk
internal.gcir.org
info.appcelerator.com
hub.meed.com
kgqm.kjzz.org
covid.usmle.org
dev-camdenbase.libraries.rutgers.edu
info.religionnews.com
infonet.fia.org
intranet.olivecrest.org
gws-uat.earthjustice.org
d7.cmc.edu
ipv6.earthjustice.org
it.22squared.com
kim.lovelace.shiatsusociety.org
d7.cmc.edu
junk.dana.org
shiatsusociety.co.uk
info.vcfa.edu
infonet.fia.org
inside.kjzz.org
iam.earthjustice.org
info-dev.calperformances.org
d7.cmc.edu
shiatsusociety.co.uk
junk.dana.org
internetcouncil.nacha.org
coins.rutgers.edu
jwplayer.essence.com
inside.gc.cuny.edu
csc.arizona.edu

Certificate

The complete raw certificate details for kim.lovelace.shiatsusociety.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSnemv0wZzcXAgMkBQX
ztwjNHFrHpIs5axrzzrdlw7T+GZAQLPiUvSZmF3ScRQ1Ni77M7wvvj8WKgEm6kmk
IGsqEr1NwVO/9M+bfL4ePy1ywV87Wx7ZOVVK4JWJMqctOtWZynJz3jX67Nda0+9B
++4/N4TAaLpUnxu83mMaTL+l/8yYin0iItxxZ3YRMvL8oMO9BWqFighCSszfIpRu
fGHjpEeodJZe7aLi7DcePvwyXZWi/al1YQeCdFkrpkcgk8myhP/APzQjk3bdKAlw
KQDdvQR4Y3b+bMJVibDWVrVqjLz+ybpaAJiOjKOmp9NDC6LZPJujVsE+mvYR8y2Z
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365925425657229347745730809799172439180662
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 02:10:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 02:10:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kim.lovelace.shiatsusociety.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295278889261962340330570593076765092564594026629510040566849443941721212705222905469227342749655760761925628146467776896918161669177237506061638055976839317974540229085566909601290432792766688540743857041618507082302908209321494362376641574366690514136936988276436757394515726000349835912320682069511736058985263380188984941851626522348036976567257123937402752130277851931257557691396509910741392947845349707974538616547869499133806197294376341097227039876415788275764051935080580783290065738507278734728703160147978353048962982659390140744073959855669537306275821116832669307766091573181749448001568724078979553621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9afd9c5c2527f73da763fa006a0c82e19841d49a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2439 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kim.lovelace.shiatsusociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubernetes.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laborlabsandbox.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldap.cscc.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberalarts.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libre.estadio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindsay.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.bme.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.mcgeorge.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.voiceofsandiego.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macaugaming.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailams.ustelecom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.magicsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaroom.livestrong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memberauth.audiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsites.globalwaters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilize.medika.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpo.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msa2016.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multidev1.gc.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartechedge.nar.realtor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.catholicschoolsbq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsite.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.warnerpacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noticias.lared.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'null.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odl.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oksy.fronterasdesk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.gistnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldsite.itu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'om.sterling.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.foodsafety.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacy.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianolive.americamagazine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'post-wp.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppr.erdf.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.dfa.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-www.chop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programs.alvernia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-pantheon.umdearborn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psp.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubsrv.eforms.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'querybuilder.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsafe.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.library.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redesignhealthcare.mclaren.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirects.policy.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religion.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'requestgem.business.ucdenver.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reweb.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgd2020.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmp.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpgp.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstruments.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstrumentsinfo.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruby-staging.vilcek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scilsresx.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdgs-staging.scout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexgenderlab.human.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot.pbn-a56.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.commonsensemedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.davidson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourceu.warnerpacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-na.altran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.freedomworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanfordsummersession.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'states.drugpolicy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static5.bisparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfincrease.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summercollegeacademy.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv3.presidio.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swfwmd.state.fl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'system.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.wholegrainscouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tango.franklin.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technoculturalstudies.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cee.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cochise.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.efc.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ethics3.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ocio.osu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b5a83522f0000040300473045022008b3c5b33cd73e839a5a0758a1ae601e4d674522281d6791da802a49cce7543c0221008d6b93e3b3b5ca336cc8b9fd92ab60d97730e196cac700cef480581fcbea5b9700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b5a83527400000403004730450220758f83d104514b2ef7d41462cde769b213a8585f7e33a5f1c6c67b4a36ed3615022100b0a96c46d11b4c05a3d38177ef086c17442147d769fb0941844c2cf8fd192819
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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