jc.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:0f:48:7d:d3:ff:c2:ce:53:da:3e:ea:c6:ee:2d:70:03:a4 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jc.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0f:48:7d:d3:ff:c2:ce:53:da:3e:ea:c6:ee:2d:70:03:a4
Serial Number (int): 353649736983510791672995246579105238352804
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9a:fd:9c:5c:25:27:f7:3d:a7:63:fa:00:6a:0c:82:e1:98:41:d4:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 38:5d:ac:22:a1:5e:3a:dc:51:54:bf:8b:20:a3:4f:0b:d9:cc:ea:02
Fingerprint (sha256): 87:9d:cf:35:fa:02:dd:e8:c4:4d:03:7c:f4:9e:76:2e:68:fc:1a:23:fb:95:3d:8e:9c:18:01:b3:fe:2c:17:48

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jc.edu

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1.govdelivery.com
252fwww.doctorswithoutborders.org
2d252fcontent.govdelivery.com
a-filer-records.hosting.cornell.edu
accreditation.gatewaycc.edu
afbc-submission.banking.unsw.edu.au
aggievote.ucdavis.edu
arabsinamerica.unc.edu
blog.teachingandlearning.unc.edu
bmeclub.bme.ncsu.edu
bostoto.rockhurst.edu
btgmrh.religionnews.com
carolinabond.unc.edu
carolinamxlescholars.unc.edu
catalog.antiochsb.edu
ccblog.ashevillenc.gov
ccli.unc.edu
changealife.rmu.edu
chilebase.oceana.org
cinemadigitalmedia.ucdavis.edu
commonground.usc.edu
cors.jsums.edu
datacenter.isdi.education
datacenter.religionnews.com
dev.aep.cornell.edu
dev.bog.georgetown.edu
dev.erdf.appcelerator.com
dev.newsbusters.org
dev.ophd.pantheon.berkeley.edu
developers-new.nwea.org
domainkey.religionnews.com
emergingtech.newstatesman.com
fms.umd.edu
food.dev.oceana.org
freeorder.dev.oceana.org
geniuschallenge.ny.gov
geo.nysenate.gov
heal.ucdavis.edu
hooverlab.engineering.asu.edu
hr.ahsc.arizona.edu
hub.uahs.arizona.edu
humantrafficking.unc.edu
instructional-continuity.id.ucsb.edu
intelligence.coronavirus.wa.gov
intldev.oceana.org
jangan.religionnews.com
jc.edu
jcsu.edu
jobs.rainscapes.com
lactation.sfsu.edu
live-ua-chandler.pantheonsite.io
live.haas-executive.pantheon.berkeley.edu
livecntest.ppld.org
lsee.humboldt.edu
mail.as-coa.org
mediasandbox.cas.msu.edu
meridian-180.eforums.cornell.edu
mrc.vermont.gov
new.atr.org
onlineradiologydegree.adu.edu
onq.kqed.org
pentest.web.arizona.edu
phyloloab.test.franklinresearch.uga.edu
pr-377.pantheon-multidev.ufc.com
psp.sandiegozoowildlifealliance.org
pubsafeweb.rutgers.edu
pubtogel-takingmeasure.blogs.govdelivery.com
qe.uchicago.edu
sbobet.sites.intg.voya.com
sbsm.dev.oceana.org
ssp.dce.harvard.edu
staging.law.georgetown.edu
staging.mrctv.org
tai-rds.braggcrane.com
telemicroscopy.berkeley.edu
test.engmanagement.cornell.edu
test.ophd.pantheon.berkeley.edu
togeltoto.doctorswithoutborders.org
tt.arizona.edu
vitals.medicine.utoronto.ca
wpp.wustl.edu
www.acupunctureboard.az.gov
www.admission.berkeley.edu
www.apsmuseum.org
www.asc.usc.edu
www.bcf.arl.arizona.edu
www.bis.uga.edu
www.boec.az.gov
www.brand.cce.cornell.edu
www.caldining.berkeley.edu
www.cals-mac.arizona.edu
www.campusrec.arizona.edu
www.circle.berkeley.edu
www.dev.ag.ny.gov
www.fms.umd.edu
www.gfellerwallerlaw.unc.edu
www.global.rutgers.edu
www.hr.ahsc.arizona.edu
www.italianacademy.columbia.edu

Other certificates including the domain name jc.edu

(limited to 100 certificates)
communityadvancementfirm.com
mail.jc.edu
sts.jc.edu
asikmpo.discoverlosangeles.com
mail.jc.edu
mail.jc.edu
secure.jc.edu
aruba.jc.edu
mail.jc.edu
jc.edu
jc.edu
*.jc.edu
sts.jc.edu
aruba.jc.edu
1.govdelivery.com
secure.jc.edu
www.jc.edu
asikmpo.discoverlosangeles.com
jc.edu
mail.jc.edu
jc.edu
jc.edu
jc.edu
1.govdelivery.com
jc.edu
jc.edu
secure.jc.edu
secure.jc.edu
jc.edu
jc.edu
mail.jc.edu
jc.edu
jc.edu
mail.jc.edu
secure.jc.edu
mail.jc.edu
secure.jc.edu
jc.edu
secure.jc.edu
jc.edu
mail.jc.edu
jc.edu
aruba.jc.edu
mail.jc.edu
mail.jc.edu
jc.edu
mail.jc.edu
sts.jc.edu
sts.jc.edu
mail.jc.edu
secure.jc.edu
jc-ad5.jc.edu
jc.edu
aruba.jc.edu
mail.jc.edu
mail.jc.edu

Certificate

The complete raw certificate details for jc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOizCCDXOgAwIBAgISBA9IfdP/ws5T2j7qxu4tcAOkMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTQwNjMzMjJaFw0yNDAzMTMwNjMzMjFaMBExDzANBgNVBAMT
BmpjLmVkdTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMB0p3pr9MGc
3FwIDJAUF87cIzRxax6SLOWsa8863ZcO0/hmQECz4lL0mZhd0nEUNTYu+zO8L74/
FioBJupJpCBrKhK9TcFTv/TPm3y+Hj8tcsFfO1se2TlVSuCViTKnLTrVmcpyc941
+uzXWtPvQfvuPzeEwGi6VJ8bvN5jGky/pf/MmIp9IiLccWd2ETLy/KDDvQVqhYoI
QkrM3yKUbnxh46RHqHSWXu2i4uw3Hj78Ml2Vov2pdWEHgnRZK6ZHIJPJsoT/wD80
I5N23SgJcCkA3b0EeGN2/mzCVYmw1la1aoy8/sm6WgCYjoyjpqfTQwui2Tybo1bB
Ppr2EfMtmVUCAwEAAaOCC7owggu2MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUmv2c
XCUn9z2nY/oAagyC4ZhB1JowHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsU
wsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5j
ci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggnABgNV
HREEggm3MIIJs4IRMS5nb3ZkZWxpdmVyeS5jb22CITI1MmZ3d3cuZG9jdG9yc3dp
dGhvdXRib3JkZXJzLm9yZ4IdMmQyNTJmY29udGVudC5nb3ZkZWxpdmVyeS5jb22C
I2EtZmlsZXItcmVjb3Jkcy5ob3N0aW5nLmNvcm5lbGwuZWR1ghthY2NyZWRpdGF0
aW9uLmdhdGV3YXljYy5lZHWCI2FmYmMtc3VibWlzc2lvbi5iYW5raW5nLnVuc3cu
ZWR1LmF1ghVhZ2dpZXZvdGUudWNkYXZpcy5lZHWCFmFyYWJzaW5hbWVyaWNhLnVu
Yy5lZHWCIGJsb2cudGVhY2hpbmdhbmRsZWFybmluZy51bmMuZWR1ghRibWVjbHVi
LmJtZS5uY3N1LmVkdYIVYm9zdG90by5yb2NraHVyc3QuZWR1ghdidGdtcmgucmVs
aWdpb25uZXdzLmNvbYIUY2Fyb2xpbmFib25kLnVuYy5lZHWCHGNhcm9saW5hbXhs
ZXNjaG9sYXJzLnVuYy5lZHWCFWNhdGFsb2cuYW50aW9jaHNiLmVkdYIWY2NibG9n
LmFzaGV2aWxsZW5jLmdvdoIMY2NsaS51bmMuZWR1ghNjaGFuZ2VhbGlmZS5ybXUu
ZWR1ghRjaGlsZWJhc2Uub2NlYW5hLm9yZ4IeY2luZW1hZGlnaXRhbG1lZGlhLnVj
ZGF2aXMuZWR1ghRjb21tb25ncm91bmQudXNjLmVkdYIOY29ycy5qc3Vtcy5lZHWC
GWRhdGFjZW50ZXIuaXNkaS5lZHVjYXRpb26CG2RhdGFjZW50ZXIucmVsaWdpb25u
ZXdzLmNvbYITZGV2LmFlcC5jb3JuZWxsLmVkdYIWZGV2LmJvZy5nZW9yZ2V0b3du
LmVkdYIZZGV2LmVyZGYuYXBwY2VsZXJhdG9yLmNvbYITZGV2Lm5ld3NidXN0ZXJz
Lm9yZ4IeZGV2Lm9waGQucGFudGhlb24uYmVya2VsZXkuZWR1ghdkZXZlbG9wZXJz
LW5ldy5ud2VhLm9yZ4IaZG9tYWlua2V5LnJlbGlnaW9ubmV3cy5jb22CHWVtZXJn
aW5ndGVjaC5uZXdzdGF0ZXNtYW4uY29tggtmbXMudW1kLmVkdYITZm9vZC5kZXYu
b2NlYW5hLm9yZ4IYZnJlZW9yZGVyLmRldi5vY2VhbmEub3JnghZnZW5pdXNjaGFs
bGVuZ2UubnkuZ292ghBnZW8ubnlzZW5hdGUuZ292ghBoZWFsLnVjZGF2aXMuZWR1
gh1ob292ZXJsYWIuZW5naW5lZXJpbmcuYXN1LmVkdYITaHIuYWhzYy5hcml6b25h
LmVkdYIUaHViLnVhaHMuYXJpem9uYS5lZHWCGGh1bWFudHJhZmZpY2tpbmcudW5j
LmVkdYIkaW5zdHJ1Y3Rpb25hbC1jb250aW51aXR5LmlkLnVjc2IuZWR1gh9pbnRl
bGxpZ2VuY2UuY29yb25hdmlydXMud2EuZ292ghJpbnRsZGV2Lm9jZWFuYS5vcmeC
F2phbmdhbi5yZWxpZ2lvbm5ld3MuY29tggZqYy5lZHWCCGpjc3UuZWR1ghNqb2Jz
LnJhaW5zY2FwZXMuY29tghJsYWN0YXRpb24uc2ZzdS5lZHWCIGxpdmUtdWEtY2hh
bmRsZXIucGFudGhlb25zaXRlLmlvgilsaXZlLmhhYXMtZXhlY3V0aXZlLnBhbnRo
ZW9uLmJlcmtlbGV5LmVkdYITbGl2ZWNudGVzdC5wcGxkLm9yZ4IRbHNlZS5odW1i
b2xkdC5lZHWCD21haWwuYXMtY29hLm9yZ4IYbWVkaWFzYW5kYm94LmNhcy5tc3Uu
ZWR1giBtZXJpZGlhbi0xODAuZWZvcnVtcy5jb3JuZWxsLmVkdYIPbXJjLnZlcm1v
bnQuZ292ggtuZXcuYXRyLm9yZ4Idb25saW5lcmFkaW9sb2d5ZGVncmVlLmFkdS5l
ZHWCDG9ucS5rcWVkLm9yZ4IXcGVudGVzdC53ZWIuYXJpem9uYS5lZHWCJ3BoeWxv
bG9hYi50ZXN0LmZyYW5rbGlucmVzZWFyY2gudWdhLmVkdYIgcHItMzc3LnBhbnRo
ZW9uLW11bHRpZGV2LnVmYy5jb22CI3BzcC5zYW5kaWVnb3pvb3dpbGRsaWZlYWxs
aWFuY2Uub3JnghZwdWJzYWZld2ViLnJ1dGdlcnMuZWR1gixwdWJ0b2dlbC10YWtp
bmdtZWFzdXJlLmJsb2dzLmdvdmRlbGl2ZXJ5LmNvbYIPcWUudWNoaWNhZ28uZWR1
ghpzYm9iZXQuc2l0ZXMuaW50Zy52b3lhLmNvbYITc2JzbS5kZXYub2NlYW5hLm9y
Z4ITc3NwLmRjZS5oYXJ2YXJkLmVkdYIac3RhZ2luZy5sYXcuZ2VvcmdldG93bi5l
ZHWCEXN0YWdpbmcubXJjdHYub3JnghZ0YWktcmRzLmJyYWdnY3JhbmUuY29tght0
ZWxlbWljcm9zY29weS5iZXJrZWxleS5lZHWCHnRlc3QuZW5nbWFuYWdlbWVudC5j
b3JuZWxsLmVkdYIfdGVzdC5vcGhkLnBhbnRoZW9uLmJlcmtlbGV5LmVkdYIjdG9n
ZWx0b3RvLmRvY3RvcnN3aXRob3V0Ym9yZGVycy5vcmeCDnR0LmFyaXpvbmEuZWR1
ght2aXRhbHMubWVkaWNpbmUudXRvcm9udG8uY2GCDXdwcC53dXN0bC5lZHWCG3d3
dy5hY3VwdW5jdHVyZWJvYXJkLmF6LmdvdoIad3d3LmFkbWlzc2lvbi5iZXJrZWxl
eS5lZHWCEXd3dy5hcHNtdXNldW0ub3Jngg93d3cuYXNjLnVzYy5lZHWCF3d3dy5i
Y2YuYXJsLmFyaXpvbmEuZWR1gg93d3cuYmlzLnVnYS5lZHWCD3d3dy5ib2VjLmF6
LmdvdoIZd3d3LmJyYW5kLmNjZS5jb3JuZWxsLmVkdYIad3d3LmNhbGRpbmluZy5i
ZXJrZWxleS5lZHWCGHd3dy5jYWxzLW1hYy5hcml6b25hLmVkdYIZd3d3LmNhbXB1
c3JlYy5hcml6b25hLmVkdYIXd3d3LmNpcmNsZS5iZXJrZWxleS5lZHWCEXd3dy5k
ZXYuYWcubnkuZ292gg93d3cuZm1zLnVtZC5lZHWCHHd3dy5nZmVsbGVyd2FsbGVy
bGF3LnVuYy5lZHWCFnd3dy5nbG9iYWwucnV0Z2Vycy5lZHWCF3d3dy5oci5haHNj
LmFyaXpvbmEuZWR1gh93d3cuaXRhbGlhbmFjYWRlbXkuY29sdW1iaWEuZWR1MBMG
A1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAO1N3
dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGMZz6PGgAABAMARzBFAiEA
hVDtMJ0c4W6QBgHJWbjLToAqEPNUI/rVo0CUN9wP9E0CIAjoquBCSH3lQT/lg8C/
TUe99Z2HLn/MC2xQWkMc7oDwAHcAouK/1h7eLy8HoNZObTen3GVDsMa1LqLat4r4
mm31F9gAAAGMZz6PJwAABAMASDBGAiEAxBYUPrkm6heLqnZA5ruOI3Kw+/RC9XPC
8e7DaLhNrLECIQCqyhmYyYJtnh/Az1KMPp3hnPSk+y5qBwcu6GYCQoaPOzANBgkq
hkiG9w0BAQsFAAOCAQEATA7tFONtR510stEH65ISMpVwU+N1BKlOyqSL3u7GweNK
wgLhp99rGCbUAkHs8Nexqx/Wz77RLZVUaf0IHCa2Dm7tcom8qpukfkJcEJ8byPk1
cePDJhkNRUe6ySw1WLwB12aoiJjnQRSgVC8lWmaM4AMhg99i9gwYRMRcZZkcLqmJ
qlokoANT192UBJEG4DlrRJw/iQ1IiTQt2BQTnedEGatF3bcvv9a7VyR1p/CSwHc8
VocAMgZnoxPa8UBYZcK/xVTBGkJCpCirJqBShYZWv0whDhYktqkI495YnTjR6QmD
mjg6v1fUQNxgDgj1LSIdZZDZTu0IJSoGIPUK9gRpLQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSnemv0wZzcXAgMkBQX
ztwjNHFrHpIs5axrzzrdlw7T+GZAQLPiUvSZmF3ScRQ1Ni77M7wvvj8WKgEm6kmk
IGsqEr1NwVO/9M+bfL4ePy1ywV87Wx7ZOVVK4JWJMqctOtWZynJz3jX67Nda0+9B
++4/N4TAaLpUnxu83mMaTL+l/8yYin0iItxxZ3YRMvL8oMO9BWqFighCSszfIpRu
fGHjpEeodJZe7aLi7DcePvwyXZWi/al1YQeCdFkrpkcgk8myhP/APzQjk3bdKAlw
KQDdvQR4Y3b+bMJVibDWVrVqjLz+ybpaAJiOjKOmp9NDC6LZPJujVsE+mvYR8y2Z
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353649736983510791672995246579105238352804
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 06:33:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 06:33:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295278889261962340330570593076765092564594026629510040566849443941721212705222905469227342749655760761925628146467776896918161669177237506061638055976839317974540229085566909601290432792766688540743857041618507082302908209321494362376641574366690514136936988276436757394515726000349835912320682069511736058985263380188984941851626522348036976567257123937402752130277851931257557691396509910741392947845349707974538616547869499133806197294376341097227039876415788275764051935080580783290065738507278734728703160147978353048962982659390140744073959855669537306275821116832669307766091573181749448001568724078979553621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9afd9c5c2527f73da763fa006a0c82e19841d49a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '252fwww.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2d252fcontent.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-filer-records.hosting.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accreditation.gatewaycc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afbc-submission.banking.unsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggievote.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arabsinamerica.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.teachingandlearning.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmeclub.bme.ncsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bostoto.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btgmrh.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolinabond.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolinamxlescholars.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.antiochsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccblog.ashevillenc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccli.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changealife.rmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chilebase.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinemadigitalmedia.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commonground.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cors.jsums.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datacenter.isdi.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datacenter.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bog.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.erdf.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.newsbusters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers-new.nwea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainkey.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergingtech.newstatesman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeorder.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniuschallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geo.nysenate.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heal.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hooverlab.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.ahsc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humantrafficking.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instructional-continuity.id.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligence.coronavirus.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intldev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jangan.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.rainscapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lactation.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-ua-chandler.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.haas-executive.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livecntest.ppld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsee.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediasandbox.cas.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meridian-180.eforums.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrc.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.atr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineradiologydegree.adu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onq.kqed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pentest.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phyloloab.test.franklinresearch.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr-377.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psp.sandiegozoowildlifealliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubsafeweb.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubtogel-takingmeasure.blogs.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qe.uchicago.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbobet.sites.intg.voya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbsm.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssp.dce.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.law.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mrctv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tai-rds.braggcrane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telemicroscopy.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.engmanagement.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togeltoto.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tt.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitals.medicine.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpp.wustl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acupunctureboard.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admission.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apsmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asc.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcf.arl.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bis.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boec.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brand.cce.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caldining.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cals-mac.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campusrec.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circle.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.ag.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fms.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfellerwallerlaw.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.global.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hr.ahsc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.italianacademy.columbia.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c673e8f1a00000403004730450221008550ed309d1ce16e900601c959b8cb4e802a10f35423fad5a3409437dc0ff44d022008e8aae042487de5413fe583c0bf4d47bdf59d872e7fcc0b6c505a431cee80f0007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c673e8f270000040300483046022100c416143eb926ea178baa7640e6bb8e2372b0fbf442f573c2f1eec368b84dacb1022100aaca1998c9826d9e1fc0cf528c3e9de19cf4a4fb2e6a07072ee8660242868f3b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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