kim.lovelace.shiatsusociety.org

Issued by R3

About this certificate

This digital certificate with serial number 04:bd:39:26:3d:87:65:55:df:e2:b7:d7:b9:3f:b8:2e:9d:54 was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kim.lovelace.shiatsusociety.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bd:39:26:3d:87:65:55:df:e2:b7:d7:b9:3f:b8:2e:9d:54
Serial Number (int): 412838475626092870273412941608464644218196
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8e:d2:0e:30:80:b6:07:5f:d3:fc:1e:f5:65:bd:46:e7:e9:2b:95:71
Fingerprint (sha256): 83:ed:33:40:a2:f1:e5:89:0c:37:e4:7c:62:68:2d:42:1f:9b:7a:ba:0f:15:62:f5:3b:d6:f6:eb:a3:e6:04:e9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kim.lovelace.shiatsusociety.org

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kim.lovelace.shiatsusociety.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kim.lovelace.shiatsusociety.org
kissingbug.arizona.edu
kubernetes.govdelivery.com
labellelab.asu.edu
laborlabsandbox.aflcio.org
lambda.usc.edu
landing.pacific.edu
law.ss.pacific.edu
ldap.cscc.unc.edu
legacy.bricartsmedia.org
legacy.hq.philabundance.org
liberalarts.ss.pacific.edu
lindsay.mcny.org
live-embed-atu.edu.help
live.aep.cornell.edu
live.bme.cornell.edu
live.cam.cornell.edu
live.mcgeorge.edu
live.ophd.pantheon.berkeley.edu
live.ucdavis.edu
lp.grad.online.udel.edu.help
lp.programs.carey.jhu.edu.help
m.ajc.org
m.religionnews.com
m.voiceofsandiego.org
mail2.concernusa.org
mailams.ustelecom.org
make.engineering.asu.edu
makinghistory.gwu.edu
management.arizona.edu
marketing.magicsoftware.com
marketingprojects.maryville.edu
mediaroom.livestrong.org
memberauth.audiology.org
mobile-data.skyandtelescope.com
msa2016.berkeley.edu
my.peregrinefund.org
mypnw.pnw.edu
nacopn3.naco.org
nanophotonics.asu.edu
nartc.fcm.arizona.edu
nartechedge.nar.realtor
news.religionnews.com
newsite.as-coa.org
newsite.dev.cms1.asa.uw.edu
next.warnerpacific.edu
noads.patch.com
nontraditional.ucsc.edu
noticias.lared.cl
nrrss.ced.berkeley.edu
null.actorsfund.org
nyild.unionderm.com
odl.rutgers.edu
oist.ucsb.edu
oldsite.itu.edu
online.asu.edu
online.ece.udel.edu
online.foodsafety.msu.edu
ordbc.arizona.edu
organize.thetrustees.org
origin-dev-gcms.absolut.com
partners.starleaf.com
parttime.carey.jhu.edu
payment.concernusa.org
pcp.sonoranucedd.fcm.arizona.edu
pharmacy.ss.pacific.edu
pianolive.americamagazine.org
pophealth.uahs.arizona.edu
post-wp.religionnews.com
powertest.ctd.northwestern.edu
ppr.erdf.appcelerator.com
prod-www.chop.edu
programs.carey.jhu.edu
projectshare.sfsu.edu
ps-pantheon.umdearborn.edu
psp.sandiegozoo.org
psych.lifesci.ucsb.edu
qa.canceratlas.cancer.org
querybuilder.appcelerator.com
radiology.virginia.edu
radsafe.berkeley.edu
rc.library.osu.edu
recovery-gse.berkeley.edu
redojs2.patch.com
religion.berkeley.edu
research-pp.stonybrook.edu
resx.usc.edu
reweb.archbalt.org
rgd2020.rutgers.edu
rheumatology.utoronto.ca
rmp.rutgers.edu
rntobsnonlineprograms.adu.edu
rpgp.berkeley.edu
rstinstruments.rstinstruments.com
rstinstrumentsinfo.rstinstruments.com
ruby-staging.vilcek.org
scilsresx.rutgers.edu

Other certificates including the domain name shiatsusociety.org

(limited to 100 certificates)
it.uahs.arizona.edu
hub.meed.com
good.gsm.cornell.edu
host2.openminds.com
inside.gc.cuny.edu
shiatsusociety.co.uk
shiatsusociety.org
junk.dana.org
shiatsusociety.co.uk
shiatsusociety.co.uk
intranet.olivecrest.org
d7.cmc.edu
info-dev.calperformances.org
internal.gcir.org
junk.dana.org
d7.cmc.edu
international.research.ucsb.edu
csc.arizona.edu
csc.arizona.edu
international.research.ucsb.edu
csc.arizona.edu
junk.dana.org
www.shiatsusociety.org
ipv6.earthjustice.org
design-engineering.princeton.edu
gws-uat.earthjustice.org
host2.cenmi.org
connect.iadb.org
alternatif.dev.oceana.org
d7store.juilliard.edu
info.vcfa.edu
info-dev.calperformances.org
internetcouncil.nacha.org
inside.gc.cuny.edu
connect.iadb.org
kgqm.kjzz.org
shiatsusociety.co.uk
junk.dana.org
covid.usmle.org
csc.arizona.edu
infonet.fia.org
covid.usmle.org
httpbin.earthjustice.org
internal.gcir.org
csc.arizona.edu
shiatsusociety.org
jp.mcny.org
kim.lovelace.shiatsusociety.org
*.shiatsusociety.org
junk.dana.org
jp.mcny.org
d7.cmc.edu
www.shiatsusociety.org
kim.lovelace.shiatsusociety.org
d7store.juilliard.edu
hub.meed.com
kim.lovelace.shiatsusociety.org
ip.earthjustice.org
d7.cmc.edu
shiatsusociety.co.uk
info.vcfa.edu
intranet.olivecrest.org
*.shiatsusociety.org
*.shiatsusociety.org
internetcouncil.nacha.org
*.shiatsusociety.org
iam.earthjustice.org
industri40.ida.dk
internal.gcir.org
info.appcelerator.com
hub.meed.com
kgqm.kjzz.org
covid.usmle.org
dev-camdenbase.libraries.rutgers.edu
info.religionnews.com
infonet.fia.org
intranet.olivecrest.org
gws-uat.earthjustice.org
d7.cmc.edu
ipv6.earthjustice.org
it.22squared.com
kim.lovelace.shiatsusociety.org
d7.cmc.edu
junk.dana.org
shiatsusociety.co.uk
info.vcfa.edu
infonet.fia.org
inside.kjzz.org
iam.earthjustice.org
info-dev.calperformances.org
d7.cmc.edu
shiatsusociety.co.uk
junk.dana.org
internetcouncil.nacha.org
coins.rutgers.edu
jwplayer.essence.com
inside.gc.cuny.edu
csc.arizona.edu

Certificate

The complete raw certificate details for kim.lovelace.shiatsusociety.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINQDCCDCigAwIBAgISBL05Jj2HZVXf4rfXuT+4Lp1UMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjExMTAwOTQ3MjhaFw0yMzAyMDgwOTQ3MjdaMCoxKDAmBgNVBAMT
H2tpbS5sb3ZlbGFjZS5zaGlhdHN1c29jaWV0eS5vcmcwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDWSssaJjkc0z3PUz0HpbZQ2Et3ZZlwTsBvwsx6utsv
k5sAsufQ4ungQhtbzAvBx293/FcyYtGcPm0d9cjHhsSTFE8Qmr8H5SbPXOPWTm7Y
oUplIYbE6jXvBGfJImgGAXDXYupRQhblaYR+aLEIW/hYM3hoz5RWLBgGobDZtLrT
fO2bT+1ZY5rDHK+q27I9i+uwwHRjJOZqMK+zfUoHmPuwb1DW4qG3nLfEddr8FYIW
Vjv/2u69aWoVyEMNWOXv8EsNYR4cFGPc8pK3JbPzE8wNjJ9x7MUn5FmQ3ehzbMm6
DkH8t62SNtyD3i4QZsrJe6D3L8OiBVbwCKSx8x9qBsDFAgMBAAGjggpWMIIKUjAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFDybF2nJtLoQI0AjOms2hQJs08HVMB8GA1Ud
IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr
BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw
Oi8vcjMuaS5sZW5jci5vcmcvMIIJFwYDVR0RBIIJDjCCCQqCH2tpbS5sb3ZlbGFj
ZS5zaGlhdHN1c29jaWV0eS5vcmeCFmtpc3NpbmdidWcuYXJpem9uYS5lZHWCGmt1
YmVybmV0ZXMuZ292ZGVsaXZlcnkuY29tghJsYWJlbGxlbGFiLmFzdS5lZHWCGmxh
Ym9ybGFic2FuZGJveC5hZmxjaW8ub3Jngg5sYW1iZGEudXNjLmVkdYITbGFuZGlu
Zy5wYWNpZmljLmVkdYISbGF3LnNzLnBhY2lmaWMuZWR1ghFsZGFwLmNzY2MudW5j
LmVkdYIYbGVnYWN5LmJyaWNhcnRzbWVkaWEub3JnghtsZWdhY3kuaHEucGhpbGFi
dW5kYW5jZS5vcmeCGmxpYmVyYWxhcnRzLnNzLnBhY2lmaWMuZWR1ghBsaW5kc2F5
Lm1jbnkub3JnghdsaXZlLWVtYmVkLWF0dS5lZHUuaGVscIIUbGl2ZS5hZXAuY29y
bmVsbC5lZHWCFGxpdmUuYm1lLmNvcm5lbGwuZWR1ghRsaXZlLmNhbS5jb3JuZWxs
LmVkdYIRbGl2ZS5tY2dlb3JnZS5lZHWCH2xpdmUub3BoZC5wYW50aGVvbi5iZXJr
ZWxleS5lZHWCEGxpdmUudWNkYXZpcy5lZHWCHGxwLmdyYWQub25saW5lLnVkZWwu
ZWR1LmhlbHCCHmxwLnByb2dyYW1zLmNhcmV5LmpodS5lZHUuaGVscIIJbS5hamMu
b3JnghJtLnJlbGlnaW9ubmV3cy5jb22CFW0udm9pY2VvZnNhbmRpZWdvLm9yZ4IU
bWFpbDIuY29uY2VybnVzYS5vcmeCFW1haWxhbXMudXN0ZWxlY29tLm9yZ4IYbWFr
ZS5lbmdpbmVlcmluZy5hc3UuZWR1ghVtYWtpbmdoaXN0b3J5Lmd3dS5lZHWCFm1h
bmFnZW1lbnQuYXJpem9uYS5lZHWCG21hcmtldGluZy5tYWdpY3NvZnR3YXJlLmNv
bYIfbWFya2V0aW5ncHJvamVjdHMubWFyeXZpbGxlLmVkdYIYbWVkaWFyb29tLmxp
dmVzdHJvbmcub3JnghhtZW1iZXJhdXRoLmF1ZGlvbG9neS5vcmeCH21vYmlsZS1k
YXRhLnNreWFuZHRlbGVzY29wZS5jb22CFG1zYTIwMTYuYmVya2VsZXkuZWR1ghRt
eS5wZXJlZ3JpbmVmdW5kLm9yZ4INbXlwbncucG53LmVkdYIQbmFjb3BuMy5uYWNv
Lm9yZ4IVbmFub3Bob3Rvbmljcy5hc3UuZWR1ghVuYXJ0Yy5mY20uYXJpem9uYS5l
ZHWCF25hcnRlY2hlZGdlLm5hci5yZWFsdG9yghVuZXdzLnJlbGlnaW9ubmV3cy5j
b22CEm5ld3NpdGUuYXMtY29hLm9yZ4IbbmV3c2l0ZS5kZXYuY21zMS5hc2EudXcu
ZWR1ghZuZXh0Lndhcm5lcnBhY2lmaWMuZWR1gg9ub2Fkcy5wYXRjaC5jb22CF25v
bnRyYWRpdGlvbmFsLnVjc2MuZWR1ghFub3RpY2lhcy5sYXJlZC5jbIIWbnJyc3Mu
Y2VkLmJlcmtlbGV5LmVkdYITbnVsbC5hY3RvcnNmdW5kLm9yZ4ITbnlpbGQudW5p
b25kZXJtLmNvbYIPb2RsLnJ1dGdlcnMuZWR1gg1vaXN0LnVjc2IuZWR1gg9vbGRz
aXRlLml0dS5lZHWCDm9ubGluZS5hc3UuZWR1ghNvbmxpbmUuZWNlLnVkZWwuZWR1
ghlvbmxpbmUuZm9vZHNhZmV0eS5tc3UuZWR1ghFvcmRiYy5hcml6b25hLmVkdYIY
b3JnYW5pemUudGhldHJ1c3RlZXMub3JnghtvcmlnaW4tZGV2LWdjbXMuYWJzb2x1
dC5jb22CFXBhcnRuZXJzLnN0YXJsZWFmLmNvbYIWcGFydHRpbWUuY2FyZXkuamh1
LmVkdYIWcGF5bWVudC5jb25jZXJudXNhLm9yZ4IgcGNwLnNvbm9yYW51Y2VkZC5m
Y20uYXJpem9uYS5lZHWCF3BoYXJtYWN5LnNzLnBhY2lmaWMuZWR1gh1waWFub2xp
dmUuYW1lcmljYW1hZ2F6aW5lLm9yZ4IacG9waGVhbHRoLnVhaHMuYXJpem9uYS5l
ZHWCGHBvc3Qtd3AucmVsaWdpb25uZXdzLmNvbYIecG93ZXJ0ZXN0LmN0ZC5ub3J0
aHdlc3Rlcm4uZWR1ghlwcHIuZXJkZi5hcHBjZWxlcmF0b3IuY29tghFwcm9kLXd3
dy5jaG9wLmVkdYIWcHJvZ3JhbXMuY2FyZXkuamh1LmVkdYIVcHJvamVjdHNoYXJl
LnNmc3UuZWR1ghpwcy1wYW50aGVvbi51bWRlYXJib3JuLmVkdYITcHNwLnNhbmRp
ZWdvem9vLm9yZ4IWcHN5Y2gubGlmZXNjaS51Y3NiLmVkdYIZcWEuY2FuY2VyYXRs
YXMuY2FuY2VyLm9yZ4IdcXVlcnlidWlsZGVyLmFwcGNlbGVyYXRvci5jb22CFnJh
ZGlvbG9neS52aXJnaW5pYS5lZHWCFHJhZHNhZmUuYmVya2VsZXkuZWR1ghJyYy5s
aWJyYXJ5Lm9zdS5lZHWCGXJlY292ZXJ5LWdzZS5iZXJrZWxleS5lZHWCEXJlZG9q
czIucGF0Y2guY29tghVyZWxpZ2lvbi5iZXJrZWxleS5lZHWCGnJlc2VhcmNoLXBw
LnN0b255YnJvb2suZWR1ggxyZXN4LnVzYy5lZHWCEnJld2ViLmFyY2hiYWx0Lm9y
Z4ITcmdkMjAyMC5ydXRnZXJzLmVkdYIYcmhldW1hdG9sb2d5LnV0b3JvbnRvLmNh
gg9ybXAucnV0Z2Vycy5lZHWCHXJudG9ic25vbmxpbmVwcm9ncmFtcy5hZHUuZWR1
ghFycGdwLmJlcmtlbGV5LmVkdYIhcnN0aW5zdHJ1bWVudHMucnN0aW5zdHJ1bWVu
dHMuY29tgiVyc3RpbnN0cnVtZW50c2luZm8ucnN0aW5zdHJ1bWVudHMuY29tghdy
dWJ5LXN0YWdpbmcudmlsY2VrLm9yZ4IVc2NpbHNyZXN4LnJ1dGdlcnMuZWR1MEwG
A1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEW
Gmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMBMGCisGAQQB1nkCBAMBAf8EAgUA
MA0GCSqGSIb3DQEBCwUAA4IBAQBsKgfD/3KKz71oOV0ZnwhYH7lG0qwPdTOfy4jH
dCqUHlmo03CSYCS0843QCl9VAA/7nIengAD0Frx5k25nwWGpKXuLNjk0OsYcT6LI
zYjzkSNSYM+Jwya1iWWp2FPEzxUIEf95Bm7TNYBGvT9v3+gWHITfDu8ak4TvXdAk
HdIlsIFj4p7aaZ+fkIM6I0hNniu5IGF6pLa/U8OImB0uzW8rx7zyJ1kNFn4ySSvo
dkwl8mthPHUMX4tM7zfhK9TbFn1X+gvjtpaHLF3NiJ4BJjLntufdbo/VriCnh5Q+
8WhXqjuGUXm8MoCWuk0shehkkobislz+f7oXV97fVHpSB3pb
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412838475626092870273412941608464644218196
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-10 09:47:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-08 09:47:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kim.lovelace.shiatsusociety.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2318 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kim.lovelace.shiatsusociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kissingbug.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubernetes.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labellelab.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laborlabsandbox.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambda.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldap.cscc.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.bricartsmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.hq.philabundance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberalarts.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindsay.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-embed-atu.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.bme.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.mcgeorge.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.grad.online.udel.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.programs.carey.jhu.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ajc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.voiceofsandiego.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail2.concernusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailams.ustelecom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'make.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'management.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.magicsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingprojects.maryville.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaroom.livestrong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memberauth.audiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-data.skyandtelescope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msa2016.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.peregrinefund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypnw.pnw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nacopn3.naco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanophotonics.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartechedge.nar.realtor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsite.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsite.dev.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.warnerpacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noads.patch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nontraditional.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noticias.lared.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrrss.ced.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'null.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyild.unionderm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odl.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oist.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldsite.itu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.ece.udel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.foodsafety.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordbc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organize.thetrustees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-dev-gcms.absolut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.starleaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parttime.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.concernusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcp.sonoranucedd.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacy.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianolive.americamagazine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pophealth.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'post-wp.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powertest.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppr.erdf.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-www.chop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programs.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectshare.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-pantheon.umdearborn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psp.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psych.lifesci.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.canceratlas.cancer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'querybuilder.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiology.virginia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsafe.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.library.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recovery-gse.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redojs2.patch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religion.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research-pp.stonybrook.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reweb.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgd2020.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmp.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rntobsnonlineprograms.adu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpgp.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstruments.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstrumentsinfo.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruby-staging.vilcek.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scilsresx.rutgers.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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