law.ss.pacific.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:18:3a:01:ba:e4:57:17:ed:0a:ef:e9:be:34:30:47:df:b4 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=law.ss.pacific.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:18:3a:01:ba:e4:57:17:ed:0a:ef:e9:be:34:30:47:df:b4
Serial Number (int): 356693024739815054818086525350071515996084
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 83:66:68:af:12:64:26:23:ee:a9:55:94:32:a5:40:c6:c2:81:f0:70
Fingerprint (sha256): 80:89:38:72:43:a6:b4:be:bb:20:1f:56:d5:3c:02:a4:b9:0e:3e:a0:bf:08:b9:ce:fe:57:84:31:de:ce:f5:ce

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate law.ss.pacific.edu

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for law.ss.pacific.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

law.ss.pacific.edu
ldap.cscc.unc.edu
leap.ucdavis.edu
legacy.bricartsmedia.org
liberalarts.ss.pacific.edu
live-orientation.pantheon.io
live.aep.cornell.edu
live.bme.cornell.edu
live.cam.cornell.edu
live.engineering.cornell.edu
live.ophd.pantheon.berkeley.edu
live.ucdavis.edu
lp.grad.online.udel.edu.help
lp.programs.carey.jhu.edu.help
m.ajc.org
makinghistory.gwu.edu
management.arizona.edu
marketing.magicsoftware.com
mediaroom.livestrong.org
mediasandbox.cas.msu.edu
meetingsqa.aaas.org
mindsmatter.civicaction.ca
mobile-data.skyandtelescope.com
mt.nokidhungry.org
mtageniustransitchallenge.ny.gov
multidevcom.uaf.edu
nanophotonics.asu.edu
nartc.fcm.arizona.edu
nesst.asu.edu
new.yearup.org
news.ged.com
nistmep.blogs.govdelivery.com
nxterra.ucop.edu
odl.rutgers.edu
oist.ucsb.edu
oldsite.itu.edu
online-crm.cu.edu
online.asu.edu
online.foodsafety.msu.edu
ordbc.arizona.edu
parttime.carey.jhu.edu
pcp.sonoranucedd.fcm.arizona.edu
pentest.web.arizona.edu
pharmacy.ss.pacific.edu
phd.antioch.edu
pophealth.uahs.arizona.edu
powertest.ctd.northwestern.edu
preview.brand.cals.cornell.edu
procomm2018.utoronto.ca
programs.carey.jhu.edu
projectshare.sfsu.edu
psp.sandiegozoo.org
qa.californiasciencecenter.ca.gov
qa.canceratlas.cancer.org
querybuilder.appcelerator.com
radsafe.berkeley.edu
rc.library.osu.edu
readiness.osu.edu
religion.berkeley.edu
research-pp.stonybrook.edu
resx.usc.edu
reweb.archbalt.org
rgd2020.rutgers.edu
rheumatology.utoronto.ca
rmp.rutgers.edu
robot.thepointsguy.com
rpgp.berkeley.edu
rstinstruments.rstinstruments.com
rstinstrumentsinfo.rstinstruments.com
scilsresx.rutgers.edu
sdgs-staging.scout.org
sexgenderlab.human.cornell.edu
smagent.ctd.northwestern.edu
stage.courts.ca.gov
stage.nebrwesleyan.edu
stage.onlineeducation.psu.edu
stanfordsummersession.stanford.edu
states.drugpolicy.org
stfincrease.unlv.edu
support.doctorswithoutborders.org
swau-undergrad.cleancatalog.net
swfwmd.state.fl.us
t.wholegrainscouncil.org
tango.franklin.uga.edu
test-web-lws.edu.help
test-wp.nationalreview.com

Other certificates including the domain name pacific.edu

(limited to 100 certificates)
carpepm.almonds.com
it.uahs.arizona.edu
facultyaccess.pacific.edu
allowlm.sterda.com
nartc.fcm.arizona.edu
calendar.sdzsafaripark.org
banking-business-review.com
cdn-test.battlefields.org
pacificatclassic.pacific.edu
citeak.multidevcom.uaf.edu
www.design-engineering.princeton.edu
nxterra.ucop.edu
banking-business-review.com
www.hcii.cs.cmu.edu
chns120.courseresource.yale.edu
vdi-lab.pacific.edu
208.lsnc.net
www.blogs.earthjustice.org
webdev.colorado.edu
paccppm3.serv.pacific.edu
virtual2.unlv.edu
share.pacific.edu
allowlm.sterda.com
banking-business-review.com
upenn-it.asc.upenn.edu
locksmith.pacific.edu
tigerdomains.pacific.edu
hub.meed.com
allowlm.sterda.com
208.lsnc.net
161511-web1.vilcek.org
dev.wellness.yale.edu
tutortrac.pacific.edu
nextcatalog.pacific.edu
live.ucdavis.edu
info-dev.calperformances.org
sfshare.pacific.edu
pacificnet-ssl1.serv.pacific.edu
firestatus.link
chns168.courseresource.yale.edu
good.gsm.cornell.edu
pacshare.pacific.edu
www.lgcr.com
www.nai.arizona.edu
info.pacific.edu
vdi-lab.pacific.edu
nistmep.blogs.govdelivery.com
liberalarts.ss.pacific.edu
tigertotiger.pacific.edu
dev.embody.yale.edu
expeditions.sandiegozoo.org
club.kjzz.org
dev.wellness.yale.edu
pacificatclassic.pacific.edu
host2.openminds.com
taftcollegemultiply.com
m.ajc.org
www.esc.rutgers.edu
www.datahero.com
208.lsnc.net
www.datahero.com
www.bodywerks-medspa.com
208.lsnc.net
tigertotiger.pacific.edu
degreeworks.cloud.pacific.edu
live.bme.cornell.edu
www.extension.ucdavis.edu
mail.pacific.edu
allowlm.sterda.com
208.lsnc.net
labellelab.asu.edu
admissions.pacific.edu
legacy.hq.philabundance.org
eredirect.pacific.edu
pacificatclassic.pacific.edu
banking-business-review.com
inside.gc.cuny.edu
cyberlab.pacific.edu
nartc.fcm.arizona.edu
allowlm.sterda.com
connect.iadb.org
pacificat.pacific.edu
*.cloud.pacific.edu
208.lsnc.net
lectures.pacific.edu
ecs-network.serv.pacific.edu
pacificatpublic.pacific.edu
acadmintest.cuofco.org
live.ophd.pantheon.berkeley.edu
www.cbs.asu.edu
208.lsnc.net
www.humanities.sas.upenn.edu
pacdevcrm.pacific.edu
banking-business-review.com
160.167.tmcapital.com
timothyconnect.com
161511-web1.vilcek.org
161511-web1.vilcek.org
inside.ec.pacific.edu
test.mae.cornell.edu

Certificate

The complete raw certificate details for law.ss.pacific.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356693024739815054818086525350071515996084
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-11 08:56:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 08:56:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'law.ss.pacific.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldap.cscc.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leap.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.bricartsmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberalarts.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-orientation.pantheon.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.bme.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.engineering.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.grad.online.udel.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.programs.carey.jhu.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ajc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'management.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.magicsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaroom.livestrong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediasandbox.cas.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetingsqa.aaas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindsmatter.civicaction.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-data.skyandtelescope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mt.nokidhungry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtageniustransitchallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanophotonics.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nesst.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.yearup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.ged.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nistmep.blogs.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nxterra.ucop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odl.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oist.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldsite.itu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-crm.cu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.foodsafety.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordbc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parttime.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcp.sonoranucedd.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pentest.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacy.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phd.antioch.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pophealth.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powertest.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.brand.cals.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procomm2018.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programs.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectshare.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psp.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.californiasciencecenter.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.canceratlas.cancer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'querybuilder.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsafe.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.library.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readiness.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religion.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research-pp.stonybrook.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reweb.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgd2020.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmp.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robot.thepointsguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpgp.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstruments.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstrumentsinfo.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scilsresx.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdgs-staging.scout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexgenderlab.human.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smagent.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.courts.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanfordsummersession.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'states.drugpolicy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfincrease.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swau-undergrad.cleancatalog.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swfwmd.state.fl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.wholegrainscouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tango.franklin.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-web-lws.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-wp.nationalreview.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000183c67909ad00000403004730450220172df33876137835a5f99980d1c95e6c59a68f9518cc2d4146672127dbeb8a5a022100f7a8c57027a2f906f48f9c40ae9ff33402648fff91a26d1027949641a4cbad300075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000183c67909be000004030046304402203110b60d506fcf1ec789703cc7fbb9360003ce6e592e056d3edeff68f4482a5f022032be9c929c69db73eb500184f0255f86cc6ed960ae24c8e2697d6011f95eed8a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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