clams.aspendiscovery.org

Issued by R3

About this certificate

This digital certificate with serial number 03:00:86:a6:d5:b4:60:3d:87:66:3c:d0:47:42:55:0e:4a:ed was issued on by Let's Encrypt.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=clams.aspendiscovery.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:00:86:a6:d5:b4:60:3d:87:66:3c:d0:47:42:55:0e:4a:ed
Serial Number (int): 261515840602438535223423796566354004167405
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:f4:36:d1:74:b5:da:6d:2d:8e:15:4c:76:db:17:93:af:30:7a:b2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 46:3d:83:c3:f6:67:78:ca:94:c8:5a:b2:ef:79:91:d0:6b:4a:40:d1
Fingerprint (sha256): 8b:b1:18:b0:5a:19:3d:e8:87:8e:d8:6c:cb:57:90:3e:11:52:74:7d:79:1e:a1:73:87:40:b7:d0:18:3a:0b:1a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate clams.aspendiscovery.org

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clams.aspendiscovery.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquinnah.aspendiscovery.org
aquinnah.clamsnet.org
barnstable-sturgis.clamsnet.org
barnstable.aspendiscovery.org
bourne.aspendiscovery.org
bourne.clamsnet.org
brewster-ladies.clamsnet.org
brewster.aspendiscovery.org
cccc-wilkens.clamsnet.org
ccccwilkens.aspendiscovery.org
centerville.aspendiscovery.org
centerville.clamsnet.org
chatham-eldredge.clamsnet.org
chilmark.aspendiscovery.org
chilmark.clamsnet.org
clams.aspendiscovery.org
cotuit.aspendiscovery.org
cotuit.clamsnet.org
dennis-east-jacob-sears.clamsnet.org
dennis-memorial.clamsnet.org
dennis-public.clamsnet.org
dennis-south.clamsnet.org
dennis-west.clamsnet.org
dennismemorial.aspendiscovery.org
dennispublic.aspendiscovery.org
dennissouth.aspendiscovery.org
denniswest.aspendiscovery.org
eastham.aspendiscovery.org
eastham.clamsnet.org
edgartown.aspendiscovery.org
edgartown.clamsnet.org
eldredge.aspendiscovery.org
falmouth-public.clamsnet.org
falmouth-west.clamsnet.org
falmouthpublic.aspendiscovery.org
falmouthwest.aspendiscovery.org
harwich-brooks.clamsnet.org
harwichbrooks.aspendiscovery.org
hyannis.aspendiscovery.org
hyannis.clamsnet.org
jacobsears.aspendiscovery.org
marstons-mills.clamsnet.org
mashpee.aspendiscovery.org
mashpee.clamsnet.org
mmp.aspendiscovery.org
nantucket-atheneum.clamsnet.org
nantucket.aspendiscovery.org
oak-bluffs.clamsnet.org
oakbluffs.aspendiscovery.org
orleans-snow.clamsnet.org
osterville.aspendiscovery.org
osterville.clamsnet.org
provincetown.aspendiscovery.org
provincetown.clamsnet.org
snow.aspendiscovery.org
truro.aspendiscovery.org
truro.clamsnet.org
vineyard-haven.clamsnet.org
vineyardhaven.aspendiscovery.org
wellfleet.aspendiscovery.org
wellfleet.clamsnet.org
west-barnstable-whelden.clamsnet.org
west-tisbury.clamsnet.org
westtisbury.aspendiscovery.org
whelden.aspendiscovery.org
woods-hole.clamsnet.org
woodshole.aspendiscovery.org
yarmouth-port.clamsnet.org
yarmouth-town.clamsnet.org
yarmouthport.aspendiscovery.org
yarmouthtown.aspendiscovery.org

Other certificates including the domain name aspendiscovery.org

(limited to 100 certificates)
catalog.plumcreeklibrary.net
catalog.eulesstx.gov
abbotsford.aspendiscovery.org
opac.westchesterlibraries.org
www.uintahlibrary.org
evpl.aspendiscovery.org
darien.aspendiscovery.org
cadl.aspendiscovery.org
vokal-aspen.bywatersolutions.com
catalog.eulesstx.gov
librarycat.marionfl.org
catalog.eulesstx.gov
mckinney.aspendiscovery.org
blackgold.org
mcpl.aspendiscovery.org
clams.aspendiscovery.org
opac.westchesterlibraries.org
gmilcs.aspendiscovery.org
acpl.us
spokane.aspendiscovery.org
pit.aspendiscovery.org
catalog.sbplibrary.org
vokal-aspen.bywatersolutions.com
catalog.santafelibrary.org
monterey.aspendiscovery.org
bywaterconsortium.aspendiscovery.org
metrolibrary.aspendiscovery.org
help.aspendiscovery.org
mountainview.aspendiscovery.org
gmilcs.aspendiscovery.org
catalog.dubcolib.org
blackgold.org
gmilcs.aspendiscovery.org
catalog.dmpl.org
corvallis.aspendiscovery.org
clams.aspendiscovery.org
vokal-aspen.bywatersolutions.com
cedarpark.aspendiscovery.org
readokaloosa.org
ainsworth.aspendiscovery.org
blackgold.org
www.uintahlibrary.org
catalog.eulesstx.gov
blackgold.org
vokal-aspen.bywatersolutions.com
mountainview.aspendiscovery.org
catalog.sbplibrary.org
huntsville.aspendiscovery.org
bywaterconsortium.aspendiscovery.org
clams.aspendiscovery.org
clams.aspendiscovery.org
blackgold.org
cat.ryepubliclibrary.org
aacpl.aspendiscovery.org
acpl.us
prosper.aspendiscovery.org
ramapo-koha.aspendiscovery.org
clams.aspendiscovery.org
acpl.us
corvallis.aspendiscovery.org
prosper.aspendiscovery.org
blackgold.org
pasco.aspendiscovery.org
ainsworth.aspendiscovery.org
catalog.slolibrary.org
metrolibrary.aspendiscovery.org
payson.aspendiscovery.org
fayetteville.aspendiscovery.org
readokaloosa.org
catalog.dmpl.org
clams.aspendiscovery.org
catalog.losgatosca.gov
pcpls.aspendiscovery.org
aabrown.aspendiscovery.org
carnegiestout.aspendiscovery.org
catalog.ncwlibraries.org
blackgold.org
acpl.us
discover.knoxcountylibrary.org
abbott.aspendiscovery.org
fayetteville.aspendiscovery.org
acpl.us
clams.aspendiscovery.org
vokal-aspen.bywatersolutions.com
clams.aspendiscovery.org
maininc.aspendiscovery.org
catalog.eulesstx.gov
metroshare.aspendiscovery.org
pioneer.aspendiscovery.org
clams.aspendiscovery.org
abbotsford.aspendiscovery.org
gmilcs.aspendiscovery.org
metroshare.aspendiscovery.org
huntsville.aspendiscovery.org
catalog.ncwlibraries.org
rclstn.aspendiscovery.org
catalog.uintahlibrary.org
blackgold.org
epcounty.aspendiscovery.org
discover.knoxcountylibrary.org

Certificate

The complete raw certificate details for clams.aspendiscovery.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9C0fFUmrqKCS/g+3h+gf
QKLdRpHF49Dy6Cy7+KN0HGNGe2nbxuDUm1C+dx7ye3cOwZ+7LdvNVHEx2z2Zf4Zf
62Ja74lThZ8wmQSlrp2tUT+oGBPilvC3e1p2Vn5xGmp6Zat6Gn5+DvcBc+UC8MKl
c1aW5CrklOEm6fitQpp5y8vrKbaNcjdvo6TgvpUL8Dsa0iNU8l7A+CX/vM/dhmnh
dINFtpBjRNcxbLgAE+tgurzteegn01t01I/wKG9UNVeI+bsE84LRrcMVSSSBQ4G1
cABPzOiu+Jw9lPSzBvnKovyA8Y2BHypggBpfvEWciy+f5r3S25m59TJ+aaaXAaPU
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261515840602438535223423796566354004167405
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-28 18:48:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-26 18:48:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clams.aspendiscovery.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30824396612494309570508712193495430774738755895918715457492183664461661440397553606796303637130954217690541990582460718454772844660575990278793084573019576036583791220426155954855109644591330663460644373107098187542694219570151155111324671185749357502876172495249740253158291277926858421613495825434228473590063365919831001153308985013836444866564342100426846279484547445924267405943917100412862925750738101373372918506346570173669892743645308516396456934984449027612264298661603263093089900836047844758993258014389436154583510036002921933620579981058004136305707475914735298829184167331626835235026930092598832125107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0f436d174b5da6d2d8e154c76db1793af307ab2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2038 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquinnah.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquinnah.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnstable-sturgis.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnstable.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bourne.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bourne.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brewster-ladies.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brewster.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cccc-wilkens.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccccwilkens.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerville.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerville.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatham-eldredge.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chilmark.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chilmark.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clams.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotuit.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotuit.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennis-east-jacob-sears.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennis-memorial.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennis-public.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennis-south.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennis-west.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennismemorial.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennispublic.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennissouth.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denniswest.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastham.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastham.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edgartown.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edgartown.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eldredge.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falmouth-public.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falmouth-west.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falmouthpublic.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falmouthwest.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harwich-brooks.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harwichbrooks.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyannis.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyannis.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacobsears.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marstons-mills.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mashpee.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mashpee.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmp.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nantucket-atheneum.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nantucket.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oak-bluffs.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oakbluffs.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orleans-snow.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osterville.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osterville.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provincetown.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provincetown.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snow.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truro.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truro.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vineyard-haven.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vineyardhaven.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellfleet.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellfleet.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'west-barnstable-whelden.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'west-tisbury.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westtisbury.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whelden.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woods-hole.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodshole.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarmouth-port.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarmouth-town.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarmouthport.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarmouthtown.aspendiscovery.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001842023840a0000040300473045022100cd694d816dbf330c8230c3d1e3a6df4821715c0677b7f2b4d0394c372900b00802200291557a1a6bfbfafddf30fe166216aa5649381a4bbd468faf9b057c23c2a043007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000184202383d10000040300483046022100d53d7dd72477851e3da7147eb09c5c39afdf6d7689a924d5eec6bfdaa02b85bf02210083d81ab8bf5caf9ca5d7f3441572c9b0e74bcead2c0ca16a1e603fe7a0d33ef7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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