5703789046661120-fe2.pantheonsite.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:67:9f:2e:c3:09:52:75:d9:ab:3d:33:fe:72:f7:ce:79:55 was issued on by Let's Encrypt.

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=5703789046661120-fe2.pantheonsite.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:67:9f:2e:c3:09:52:75:d9:ab:3d:33:fe:72:f7:ce:79:55
Serial Number (int): 383709817572691388966828487383870469994837
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 75:ad:3e:60:bd:20:2c:8d:65:2e:10:55:cb:72:d4:73:3f:4a:cc:8d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1d:bf:20:dc:8d:87:eb:4e:88:bb:8b:91:25:b5:bc:1a:6e:46:9e:33
Fingerprint (sha256): 89:ed:dc:b5:bc:32:60:76:6d:18:22:4d:f3:14:7b:6f:c5:d3:36:6c:7d:4a:65:ea:db:38:88:a9:c7:a7:b8:c7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 5703789046661120-fe2.pantheonsite.io

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 5703789046661120-fe2.pantheonsite.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

5703789046661120-fe2.pantheonsite.io
arenapublica.info
arenapublica.mx
arenapublica.net
aristotle.ucsb.edu
arthistory.ucsb.edu
blumcenter.ucsb.edu
cofactorgenomics.com
congsearch-urj.radcampaign.com
crossstmarket.com
delmarvashomecaresolution.com
dev.doubledouble.be
docusign.lsit.ucsb.edu
ecepalliance.org
grassie.net
it.english.ucsb.edu
ivplants.anth.ucsb.edu
kevinchilderslaw.com
lappley.com
lialab.org.uk
little.chem.ucsb.edu
loftwordplay.net
lvcfoundation.org
m-sportshop.com
nabokovsociety.org
old.nerdologues.com
parmanlubricants.com
sargarch.com
scherandbassett.com
science.ucsb.edu
software.ucsb.edu
spectrumcollaborationchallenge.com
stage.doubledouble.be
sunstatedesigns.net
teach.nflc.umd.edu
test-iqueue.com
theshoppingcentergroup.com
twolanegems.com
vlcek.chem.ucsb.edu
weldeab.geol.ucsb.edu
www.arenapublica.com.mx
www.arenapublica.info
www.arenapublica.mx
www.arenapublica.net
www.aristotle.ucsb.edu
www.blumcenter.ucsb.edu
www.censurf.chem.ucsb.edu
www.cofactorgenomics.com
www.crossstmarket.com
www.ecepalliance.org
www.emmerichtestserver1.com
www.grassie.net
www.greatsociety.history.ucsb.edu
www.kevinchilderslaw.com
www.lappley.com
www.lialab.org.uk
www.lipshutz.chem.ucsb.edu
www.little.chem.ucsb.edu
www.loftwordplay.net
www.lvcfoundation.org
www.m-sportshop.com
www.mavensmediagroup.com
www.parmanlubricants.com
www.porter.geol.ucsb.edu
www.rehabmeasures.org
www.sargarch.com
www.scherandbassett.com
www.science.ucsb.edu
www.severedconcrete.com
www.software.ucsb.edu
www.spectrumcollaborationchallenge.com
www.sunstatedesigns.net
www.theshoppingcentergroup.com
www.twolanegems.com
www.vlcek.chem.ucsb.edu
www.weldeab.geol.ucsb.edu
yeehawbrewing.com

Other certificates including the domain name 5703789046661120-fe2.pantheonsite.io

(limited to 100 certificates)
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5703789046661120-fe2.pantheonsite.io

Certificate

The complete raw certificate details for 5703789046661120-fe2.pantheonsite.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qocTBi+ZNUA44ygROYP
Btyj8T7q8CnFd041myuyfb7/BX2OZrLwgO4I5HtxS7F+/CeKe+8m7z9Epfh5xWvs
dl2wd4JthFhy5byfkas6AGqv2xpOOTVTLs/EWdexBBC6mEgqtaNS+oINKUiBQA7a
BtxwDdw2aPjAJV3UQz8vWa+suhtVVhb2BphxFwYyFO7WQcixS1VT8H8xXFvoOhPs
O2kW74kIHN33NyfKgv45I+v19Ja7he/pJAWnnJvesCXHhJmyro6KqxjHHitBSFeU
qG+W/6xT0fuLhot6DcYfB+M9UhAgUCb0OSZCT9kVHNYAtsApgS7mfSYpj1/SiFc/
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383709817572691388966828487383870469994837
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-02 13:05:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-01 13:05:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5703789046661120-fe2.pantheonsite.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28613741554124310176440679999551609410321342184027416405650405644929917402657379732979202340920239543624390746465529465973771626974119768903882529739378799010925149646866365330501342167798783923322869974896350952063777850844435518676512255391995565421286000654041822049953199324515961920927974551514341675703965111642293412937342852334154593916209456791774102618137660427832061380910617513467081009770054423917238716370453024737949604707152365342015718625104340405461703405161255526808284368006909336609227092541385150767291411644981017368780163032105679698735800877056530346121774980948803026425837224541330817367837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							75ad3e60bd202c8d652e1055cb72d4733f4acc8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1754 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5703789046661120-fe2.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arenapublica.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arenapublica.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arenapublica.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aristotle.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arthistory.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blumcenter.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cofactorgenomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'congsearch-urj.radcampaign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossstmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delmarvashomecaresolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.doubledouble.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docusign.lsit.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecepalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grassie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.english.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivplants.anth.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kevinchilderslaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lappley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lialab.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'little.chem.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loftwordplay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lvcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-sportshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nabokovsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.nerdologues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmanlubricants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sargarch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scherandbassett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'science.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrumcollaborationchallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.doubledouble.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunstatedesigns.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teach.nflc.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-iqueue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theshoppingcentergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twolanegems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlcek.chem.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weldeab.geol.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arenapublica.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arenapublica.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arenapublica.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arenapublica.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aristotle.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blumcenter.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.censurf.chem.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cofactorgenomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crossstmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecepalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emmerichtestserver1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grassie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatsociety.history.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kevinchilderslaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lappley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lialab.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lipshutz.chem.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.little.chem.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loftwordplay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvcfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-sportshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mavensmediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parmanlubricants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porter.geol.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rehabmeasures.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sargarch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scherandbassett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.science.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.severedconcrete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.software.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spectrumcollaborationchallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunstatedesigns.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theshoppingcentergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twolanegems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vlcek.chem.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weldeab.geol.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yeehawbrewing.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000169de5e30520000040300463044022059d72f9b5ca07b407956945294147d4182bc1263c3139afb54e5ae6e348c9d5e0220015c4b35db24a7049c5b5ee429e39236850a2ea94f62aed0c41dd8622ab33fa8007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169de5e30fe0000040300473045022100b442d48f480e3082f7be53203103f56da128c0425a36f79b8ded909e98a45c0202200385998929bc26792b56e4e67732a3c6c92b1478381f35717b6d38b713132459
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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