jc.edu

Issued by R3

About this certificate

This digital certificate with serial number 03:e9:5e:dc:f2:1d:ca:18:89:c2:73:06:24:5d:94:4a:e9:32 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jc.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e9:5e:dc:f2:1d:ca:18:89:c2:73:06:24:5d:94:4a:e9:32
Serial Number (int): 340748743935475348114341872308078552738098
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:fd:9c:5c:25:27:f7:3d:a7:63:fa:00:6a:0c:82:e1:98:41:d4:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6e:d6:00:d5:e8:f4:c8:10:a8:31:a6:69:0b:42:8c:8b:b1:e7:10:3e
Fingerprint (sha256): 8a:b5:cb:66:47:ec:cf:64:ca:7f:3d:59:59:09:97:a9:d7:8a:c8:d6:e5:c5:5c:a8:fa:8f:bb:f6:d2:7c:26:93

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jc.edu

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1.govdelivery.com
252fwww.doctorswithoutborders.org
2d252fcontent.govdelivery.com
a-filer-records.hosting.cornell.edu
accreditation.gatewaycc.edu
afbc-submission.banking.unsw.edu.au
aggievote.ucdavis.edu
arabsinamerica.unc.edu
blog.teachingandlearning.unc.edu
bmeclub.bme.ncsu.edu
bostoto.rockhurst.edu
btgmrh.religionnews.com
carolinabond.unc.edu
carolinamxlescholars.unc.edu
catalog.antiochsb.edu
ccblog.ashevillenc.gov
ccli.unc.edu
changealife.rmu.edu
chilebase.oceana.org
cinemadigitalmedia.ucdavis.edu
commonground.usc.edu
cors.jsums.edu
datacenter.isdi.education
datacenter.religionnews.com
dev.aep.cornell.edu
dev.bog.georgetown.edu
dev.erdf.appcelerator.com
dev.newsbusters.org
dev.ophd.pantheon.berkeley.edu
developers-new.nwea.org
domainkey.religionnews.com
emergingtech.newstatesman.com
fms.umd.edu
food.dev.oceana.org
freeorder.dev.oceana.org
geniuschallenge.ny.gov
geo.nysenate.gov
heal.ucdavis.edu
hooverlab.engineering.asu.edu
hr.ahsc.arizona.edu
hub.uahs.arizona.edu
humantrafficking.unc.edu
instructional-continuity.id.ucsb.edu
intelligence.coronavirus.wa.gov
intldev.oceana.org
jangan.religionnews.com
jc.edu
jcsu.edu
jobs.rainscapes.com
lactation.sfsu.edu
live-ua-chandler.pantheonsite.io
live.haas-executive.pantheon.berkeley.edu
livecntest.ppld.org
lsee.humboldt.edu
mail.as-coa.org
mediasandbox.cas.msu.edu
meridian-180.eforums.cornell.edu
mrc.vermont.gov
new.atr.org
onlineradiologydegree.adu.edu
onq.kqed.org
pentest.web.arizona.edu
phyloloab.test.franklinresearch.uga.edu
pr-377.pantheon-multidev.ufc.com
psp.sandiegozoowildlifealliance.org
pubsafeweb.rutgers.edu
pubtogel-takingmeasure.blogs.govdelivery.com
qe.uchicago.edu
sbobet.sites.intg.voya.com
sbsm.dev.oceana.org
sciville.scitent.us
ssp.dce.harvard.edu
staging.law.georgetown.edu
staging.mrctv.org
tai-rds.braggcrane.com
telemicroscopy.berkeley.edu
test.engmanagement.cornell.edu
test.ophd.pantheon.berkeley.edu
togeltoto.doctorswithoutborders.org
tt.arizona.edu
vitals.medicine.utoronto.ca
wpp.wustl.edu
www.acupunctureboard.az.gov
www.admission.berkeley.edu
www.apsmuseum.org
www.asc.usc.edu
www.bcf.arl.arizona.edu
www.bis.uga.edu
www.boec.az.gov
www.brand.cce.cornell.edu
www.caldining.berkeley.edu
www.cals-mac.arizona.edu
www.campusrec.arizona.edu
www.circle.berkeley.edu
www.dev.ag.ny.gov
www.fms.umd.edu
www.gfellerwallerlaw.unc.edu
www.global.rutgers.edu

Other certificates including the domain name jc.edu

(limited to 100 certificates)
communityadvancementfirm.com
mail.jc.edu
sts.jc.edu
asikmpo.discoverlosangeles.com
mail.jc.edu
mail.jc.edu
secure.jc.edu
aruba.jc.edu
mail.jc.edu
jc.edu
jc.edu
*.jc.edu
sts.jc.edu
aruba.jc.edu
1.govdelivery.com
secure.jc.edu
www.jc.edu
asikmpo.discoverlosangeles.com
jc.edu
mail.jc.edu
jc.edu
jc.edu
jc.edu
1.govdelivery.com
jc.edu
jc.edu
secure.jc.edu
secure.jc.edu
jc.edu
jc.edu
mail.jc.edu
jc.edu
jc.edu
mail.jc.edu
secure.jc.edu
mail.jc.edu
secure.jc.edu
jc.edu
secure.jc.edu
jc.edu
mail.jc.edu
jc.edu
aruba.jc.edu
mail.jc.edu
mail.jc.edu
jc.edu
mail.jc.edu
sts.jc.edu
sts.jc.edu
mail.jc.edu
secure.jc.edu
jc-ad5.jc.edu
jc.edu
aruba.jc.edu
mail.jc.edu
mail.jc.edu

Certificate

The complete raw certificate details for jc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSnemv0wZzcXAgMkBQX
ztwjNHFrHpIs5axrzzrdlw7T+GZAQLPiUvSZmF3ScRQ1Ni77M7wvvj8WKgEm6kmk
IGsqEr1NwVO/9M+bfL4ePy1ywV87Wx7ZOVVK4JWJMqctOtWZynJz3jX67Nda0+9B
++4/N4TAaLpUnxu83mMaTL+l/8yYin0iItxxZ3YRMvL8oMO9BWqFighCSszfIpRu
fGHjpEeodJZe7aLi7DcePvwyXZWi/al1YQeCdFkrpkcgk8myhP/APzQjk3bdKAlw
KQDdvQR4Y3b+bMJVibDWVrVqjLz+ybpaAJiOjKOmp9NDC6LZPJujVsE+mvYR8y2Z
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340748743935475348114341872308078552738098
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 07:24:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 07:24:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295278889261962340330570593076765092564594026629510040566849443941721212705222905469227342749655760761925628146467776896918161669177237506061638055976839317974540229085566909601290432792766688540743857041618507082302908209321494362376641574366690514136936988276436757394515726000349835912320682069511736058985263380188984941851626522348036976567257123937402752130277851931257557691396509910741392947845349707974538616547869499133806197294376341097227039876415788275764051935080580783290065738507278734728703160147978353048962982659390140744073959855669537306275821116832669307766091573181749448001568724078979553621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9afd9c5c2527f73da763fa006a0c82e19841d49a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2450 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '252fwww.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2d252fcontent.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-filer-records.hosting.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accreditation.gatewaycc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afbc-submission.banking.unsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggievote.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arabsinamerica.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.teachingandlearning.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmeclub.bme.ncsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bostoto.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btgmrh.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolinabond.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolinamxlescholars.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.antiochsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccblog.ashevillenc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccli.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changealife.rmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chilebase.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinemadigitalmedia.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commonground.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cors.jsums.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datacenter.isdi.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datacenter.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bog.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.erdf.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.newsbusters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers-new.nwea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainkey.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergingtech.newstatesman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeorder.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geniuschallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geo.nysenate.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heal.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hooverlab.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.ahsc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humantrafficking.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instructional-continuity.id.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligence.coronavirus.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intldev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jangan.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.rainscapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lactation.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-ua-chandler.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.haas-executive.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livecntest.ppld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsee.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediasandbox.cas.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meridian-180.eforums.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrc.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.atr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineradiologydegree.adu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onq.kqed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pentest.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phyloloab.test.franklinresearch.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr-377.pantheon-multidev.ufc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psp.sandiegozoowildlifealliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubsafeweb.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubtogel-takingmeasure.blogs.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qe.uchicago.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbobet.sites.intg.voya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbsm.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciville.scitent.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssp.dce.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.law.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mrctv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tai-rds.braggcrane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telemicroscopy.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.engmanagement.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'togeltoto.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tt.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitals.medicine.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpp.wustl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acupunctureboard.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admission.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apsmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asc.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcf.arl.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bis.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boec.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brand.cce.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caldining.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cals-mac.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campusrec.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circle.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.ag.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fms.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfellerwallerlaw.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.global.rutgers.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b5ba26b91000004030047304502203c5bb07a894983bfb276414bec245e3837b5011e72f26978098f703eb0780baa022100ca223ee3ecd6a325eafc7a86e5760042a54619c5af501da6ecc83a0be53bc5600076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b5ba26b940000040300473045022075e1f7569696fd5bba187e17f0f450903e3e2d9f68bec4319949dc9c5379e1bf022100e15e5ad0a3adda40f606b75ca5769d80760df86d8b78915d4caefbc16ae1201b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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