cms.legacy.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f1:44:95:6f:67:ba:4b:75:f8:05:45:e1:92:86:f6:f4:c4 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cms.legacy.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f1:44:95:6f:67:ba:4b:75:f8:05:45:e1:92:86:f6:f4:c4
Serial Number (int): 430548357570498074432502924419281223873732
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e9:9f:4b:9c:1c:9b:77:d5:d8:19:42:a2:92:15:3d:a9:35:3b:08:40
Fingerprint (sha256): 8c:90:a5:c0:f1:24:6b:af:37:27:26:1c:60:db:e7:6f:9c:67:69:fa:99:55:45:d6:6a:af:11:71:f8:ab:3d:9b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cms.legacy.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cms.legacy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cms.legacy.com
coins.rutgers.edu
confucius.eastasian.ucsb.edu
connect.iadb.org
covid.usmle.org
cqn-erc.arizona.edu
crmtest.eastdunbarton.gov.uk
csc.arizona.edu
d7.cmc.edu
d7store.juilliard.edu
daniela.patch.com
design-engineering.princeton.edu
dev-camdenbase.libraries.rutgers.edu
dev-covid19.chop.edu
dev-lp-jhubsph.edu.help
dev-web-degacc.edu.help
dev-web-jhucareycoop.edu.help
dev-www2.ofx.com
dev.business-services.upenn.edu
dev.cee.cornell.edu
dev.champions-speakers.co.uk
dev.ctd.northwestern.edu
dev.dhsri.yale.edu
dev.ece.cornell.edu
dev.embody.yale.edu
dev.engineering.cornell.edu
dev.mae.cornell.edu
dev.mse.cornell.edu
dev.nebrwesleyan.edu
dev.onlineeducation.psu.edu
dev.ptp.brown.edu
dev.shibtest7.isc.upenn.edu
dev.wrightlaboratory.yale.edu
dev.wti.yale.edu
dev1.engineering.ucsb.edu
dev1.si.umich.edu
devdr.azmex.arizona.edu
dial.sralab.org
dlpe.calc.gatech.edu
dmats.spcs.stanford.edu
dmats.stanford.edu
ds.arizona.edu
ebot200.multidevcom.uaf.edu
ecalso.berkeley.edu
ecc.nacha.org
education.ss.pacific.edu
ehs.sph.berkeley.edu
eis.dev.cms1.asa.uw.edu
embody.yale.edu
engaginghumanities.ucsb.edu
engineering.ss.pacific.edu
environment.research.yale.edu
eventsinfo.presidio.edu
expeditions.sandiegozoo.org
explore.hunterbusinessschool.edu
exploringthecomplexity.ucdavis.edu
faculty.gsm.ucdavis.edu
fecc.nacha.org
flta.cli.asu.edu
gem.business.ucdenver.edu
get.pima.edu
giftcertificates.cookbookcooks.com
gil.engineering.asu.edu
gis.archbalt.org
giveto.shawnee.edu
gpf.nacha.org
gsefilms.gse.upenn.edu
gtpe.pe.gatech.edu
hcii.cs.cmu.edu
healthed.sfsu.edu
healthsciences.ss.pacific.edu
home.earthjustice.org
host2.cenmi.org
host2.openminds.com
host3.cenmi.org
host90.farmermac.com
hr-kiosk.tsu.edu
httpbin.earthjustice.org
iam.earthjustice.org
igert.ucsb.edu
india-test.generation.org
industri40.ida.dk
info-dev.calperformances.org
info.religionnews.com
info.vcfa.edu
infonet.fia.org
inks.govdelivery.com
inside.gc.cuny.edu
inside.kjzz.org
internal.gcir.org
international.research.ucsb.edu
internetcouncil.nacha.org
intranet.olivecrest.org
ipv6.earthjustice.org
it-chat.web.arizona.edu
it.22squared.com
it.uahs.arizona.edu
itcatalyst.sfsu.edu
iteachu.multidevcom.uaf.edu

Other certificates including the domain name legacy.com

(limited to 100 certificates)
carpepm.almonds.com
ssl003.insnw.net
ssl860932.cloudflaressl.com
calendar.sdzsafaripark.org
banking-business-review.com
cdn-test.battlefields.org
citeak.multidevcom.uaf.edu
ssl860932.cloudflaressl.com
chns120.courseresource.yale.edu
*.legacy.com
banking-business-review.com
tls.automattic.com
ssl003.insnw.net
ssl003.insnw.net
sni.cloudflaressl.com
www.legacy.com
chns168.courseresource.yale.edu
uat.legacy.com
club.kjzz.org
legacy.com
memorialwebsites.legacy.com
www.legacy.com
legacy.com
5691967484723200-fe1.pantheonsite.io
160.167.tmcapital.com
160.167.tmcapital.com
brassunion.com
acadmintest.cuofco.org
www.legacy.com
chns168.courseresource.yale.edu
*.legacy.com
acadmintest.cuofco.org
uat.legacy.com
buyersguide.aaps.org
tls.automattic.com
cdi.uga.edu
citeak.multidevcom.uaf.edu
chns168.courseresource.yale.edu
click.alerts.legacy.com
caldesignlab.berkeley.edu
160.167.tmcapital.com
cloud.alerts.legacy.com
view.alerts.legacy.com
careers.whittier.edu
ssl003.insnw.net
chns130.courseresource.yale.edu
leftwoods.com
sni.cloudflaressl.com
ssl003.insnw.net
cms.legacy.com
live-legacy-cms.pantheonsite.io
citrix.remote.naylor.com
2.www.upenn.edu
sni.cloudflaressl.com
banking-business-review.com
160.167.tmcapital.com
sympathy.legacy.com
clc.shawnee.edu
pro.legacy.com
chns150.courseresource.yale.edu
www.legacy.com
160.167.tmcapital.com
sni.cloudflaressl.com
tls.automattic.com
cci520-new.courtinnovation.org
cci520-new.courtinnovation.org
eduhup.com
media2.legacy.com
legacyowa.legacy.com
campaign.ucsc.edu
ssl003.insnw.net
chns130.courseresource.yale.edu
caldesignlab.berkeley.edu
5691967484723200-fe1.pantheonsite.io
eduhup.com
5660980839186432-fe2.pantheonsite.io
lwozzk.legacy.com
census.arizona.edu
tls.automattic.com
pro.legacy.com
chns168.courseresource.yale.edu
ssl003.insnw.net
thepointalehouse.com
lwozzk.legacy.com
sni.cloudflaressl.com
leeanatankersley.com
ssl003.insnw.net
sni.cloudflaressl.com
ssl003.insnw.net
ssl003.insnw.net
ssl003.insnw.net
ssl003.insnw.net
sni.cloudflaressl.com
ssl860932.cloudflaressl.com
ssl003.insnw.net
banking-business-review.com
ssl003.insnw.net
banking-business-review.com
ssl003.insnw.net
www.legacy.com

Certificate

The complete raw certificate details for cms.legacy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOATCCDOmgAwIBAgISBPFElW9nukt1+AVF4ZKG9vTEMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjEwMTUxMTM1MDFaFw0yMzAxMTMxMTM1MDBaMBkxFzAVBgNVBAMT
DmNtcy5sZWdhY3kuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
1krLGiY5HNM9z1M9B6W2UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdv
d/xXMmLRnD5tHfXIx4bEkxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw
12LqUUIW5WmEfmixCFv4WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvr
sMB0YyTmajCvs31KB5j7sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BL
DWEeHBRj3PKStyWz8xPMDYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug
9y/DogVW8AiksfMfagbAxQIDAQABo4ILKDCCCyQwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBQ8mxdpybS6ECNAIzprNoUCbNPB1TAfBgNVHSMEGDAWgBQULrMXt1hWy65Q
CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y
My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn
LzCCCPcGA1UdEQSCCO4wggjqgg5jbXMubGVnYWN5LmNvbYIRY29pbnMucnV0Z2Vy
cy5lZHWCHGNvbmZ1Y2l1cy5lYXN0YXNpYW4udWNzYi5lZHWCEGNvbm5lY3QuaWFk
Yi5vcmeCD2NvdmlkLnVzbWxlLm9yZ4ITY3FuLWVyYy5hcml6b25hLmVkdYIcY3Jt
dGVzdC5lYXN0ZHVuYmFydG9uLmdvdi51a4IPY3NjLmFyaXpvbmEuZWR1ggpkNy5j
bWMuZWR1ghVkN3N0b3JlLmp1aWxsaWFyZC5lZHWCEWRhbmllbGEucGF0Y2guY29t
giBkZXNpZ24tZW5naW5lZXJpbmcucHJpbmNldG9uLmVkdYIkZGV2LWNhbWRlbmJh
c2UubGlicmFyaWVzLnJ1dGdlcnMuZWR1ghRkZXYtY292aWQxOS5jaG9wLmVkdYIX
ZGV2LWxwLWpodWJzcGguZWR1LmhlbHCCF2Rldi13ZWItZGVnYWNjLmVkdS5oZWxw
gh1kZXYtd2ViLWpodWNhcmV5Y29vcC5lZHUuaGVscIIQZGV2LXd3dzIub2Z4LmNv
bYIfZGV2LmJ1c2luZXNzLXNlcnZpY2VzLnVwZW5uLmVkdYITZGV2LmNlZS5jb3Ju
ZWxsLmVkdYIcZGV2LmNoYW1waW9ucy1zcGVha2Vycy5jby51a4IYZGV2LmN0ZC5u
b3J0aHdlc3Rlcm4uZWR1ghJkZXYuZGhzcmkueWFsZS5lZHWCE2Rldi5lY2UuY29y
bmVsbC5lZHWCE2Rldi5lbWJvZHkueWFsZS5lZHWCG2Rldi5lbmdpbmVlcmluZy5j
b3JuZWxsLmVkdYITZGV2Lm1hZS5jb3JuZWxsLmVkdYITZGV2Lm1zZS5jb3JuZWxs
LmVkdYIUZGV2Lm5lYnJ3ZXNsZXlhbi5lZHWCG2Rldi5vbmxpbmVlZHVjYXRpb24u
cHN1LmVkdYIRZGV2LnB0cC5icm93bi5lZHWCG2Rldi5zaGlidGVzdDcuaXNjLnVw
ZW5uLmVkdYIdZGV2LndyaWdodGxhYm9yYXRvcnkueWFsZS5lZHWCEGRldi53dGku
eWFsZS5lZHWCGWRldjEuZW5naW5lZXJpbmcudWNzYi5lZHWCEWRldjEuc2kudW1p
Y2guZWR1ghdkZXZkci5hem1leC5hcml6b25hLmVkdYIPZGlhbC5zcmFsYWIub3Jn
ghRkbHBlLmNhbGMuZ2F0ZWNoLmVkdYIXZG1hdHMuc3Bjcy5zdGFuZm9yZC5lZHWC
EmRtYXRzLnN0YW5mb3JkLmVkdYIOZHMuYXJpem9uYS5lZHWCG2Vib3QyMDAubXVs
dGlkZXZjb20udWFmLmVkdYITZWNhbHNvLmJlcmtlbGV5LmVkdYINZWNjLm5hY2hh
Lm9yZ4IYZWR1Y2F0aW9uLnNzLnBhY2lmaWMuZWR1ghRlaHMuc3BoLmJlcmtlbGV5
LmVkdYIXZWlzLmRldi5jbXMxLmFzYS51dy5lZHWCD2VtYm9keS55YWxlLmVkdYIb
ZW5nYWdpbmdodW1hbml0aWVzLnVjc2IuZWR1ghplbmdpbmVlcmluZy5zcy5wYWNp
ZmljLmVkdYIdZW52aXJvbm1lbnQucmVzZWFyY2gueWFsZS5lZHWCF2V2ZW50c2lu
Zm8ucHJlc2lkaW8uZWR1ghtleHBlZGl0aW9ucy5zYW5kaWVnb3pvby5vcmeCIGV4
cGxvcmUuaHVudGVyYnVzaW5lc3NzY2hvb2wuZWR1giJleHBsb3Jpbmd0aGVjb21w
bGV4aXR5LnVjZGF2aXMuZWR1ghdmYWN1bHR5LmdzbS51Y2RhdmlzLmVkdYIOZmVj
Yy5uYWNoYS5vcmeCEGZsdGEuY2xpLmFzdS5lZHWCGWdlbS5idXNpbmVzcy51Y2Rl
bnZlci5lZHWCDGdldC5waW1hLmVkdYIiZ2lmdGNlcnRpZmljYXRlcy5jb29rYm9v
a2Nvb2tzLmNvbYIXZ2lsLmVuZ2luZWVyaW5nLmFzdS5lZHWCEGdpcy5hcmNoYmFs
dC5vcmeCEmdpdmV0by5zaGF3bmVlLmVkdYINZ3BmLm5hY2hhLm9yZ4IWZ3NlZmls
bXMuZ3NlLnVwZW5uLmVkdYISZ3RwZS5wZS5nYXRlY2guZWR1gg9oY2lpLmNzLmNt
dS5lZHWCEWhlYWx0aGVkLnNmc3UuZWR1gh1oZWFsdGhzY2llbmNlcy5zcy5wYWNp
ZmljLmVkdYIVaG9tZS5lYXJ0aGp1c3RpY2Uub3Jngg9ob3N0Mi5jZW5taS5vcmeC
E2hvc3QyLm9wZW5taW5kcy5jb22CD2hvc3QzLmNlbm1pLm9yZ4IUaG9zdDkwLmZh
cm1lcm1hYy5jb22CEGhyLWtpb3NrLnRzdS5lZHWCGGh0dHBiaW4uZWFydGhqdXN0
aWNlLm9yZ4IUaWFtLmVhcnRoanVzdGljZS5vcmeCDmlnZXJ0LnVjc2IuZWR1ghlp
bmRpYS10ZXN0LmdlbmVyYXRpb24ub3JnghFpbmR1c3RyaTQwLmlkYS5ka4IcaW5m
by1kZXYuY2FscGVyZm9ybWFuY2VzLm9yZ4IVaW5mby5yZWxpZ2lvbm5ld3MuY29t
gg1pbmZvLnZjZmEuZWR1gg9pbmZvbmV0LmZpYS5vcmeCFGlua3MuZ292ZGVsaXZl
cnkuY29tghJpbnNpZGUuZ2MuY3VueS5lZHWCD2luc2lkZS5ranp6Lm9yZ4IRaW50
ZXJuYWwuZ2Npci5vcmeCH2ludGVybmF0aW9uYWwucmVzZWFyY2gudWNzYi5lZHWC
GWludGVybmV0Y291bmNpbC5uYWNoYS5vcmeCF2ludHJhbmV0Lm9saXZlY3Jlc3Qu
b3JnghVpcHY2LmVhcnRoanVzdGljZS5vcmeCF2l0LWNoYXQud2ViLmFyaXpvbmEu
ZWR1ghBpdC4yMnNxdWFyZWQuY29tghNpdC51YWhzLmFyaXpvbmEuZWR1ghNpdGNh
dGFseXN0LnNmc3UuZWR1ghtpdGVhY2h1Lm11bHRpZGV2Y29tLnVhZi5lZHUwTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx
AO8AdQC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYPbpABcAAAE
AwBGMEQCIA6vDJ/jUoYC9G3Xd52FnYPGIbmW9Hi1hcrGY1VDoUb3AiA90BgHKR7/
vYe4vLEy0kiinvO5DqpE4/BBB2zi04aEWwB2AHoyjFTYty22IOo44FIe6YQWcDIT
hU070ivBOlejUutSAAABg9ukAGkAAAQDAEcwRQIhANOJfFY2aef/wsTboQfkDBxz
cKjqLZ5RSZwdS9w9FWtbAiBSR9wC9VQiyf+m6wovFEwQmmmhtyBeiv6EPBco9xUr
cjANBgkqhkiG9w0BAQsFAAOCAQEAGy5l/tLrg8wF3r/plf2HomqoFx7kpSiDj75i
hGGIx0ax4h7Kh0x+yNZwFx7P7kXDlM4QiH+6KFjSgkKcIMFHUZNN3DMHBLbG5Sz+
qfdJKTl/bLavxc7ehHJOP9zA6H2ihKFzo5ZnSDwXnFB84bqtUOOCnMqI1H0ZmWgT
6R3rOIKOWiMpOB+SPgYu6qj/BrI+bN2mTNmFcF71SgHeFY/zAPt7iXtaMFyu0auz
GmiwhWw9dHbUJgnz5lggNtPvXQIN4u8UMu7JEGf/AG/p0JbnRXs7ur9v+tvHrT/B
vRhG5e+HWrkvkWP+9cxg0ve5AuwB/zTC8A/C5Ecb8DTSStNSRA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 430548357570498074432502924419281223873732
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-15 11:35:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-13 11:35:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cms.legacy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2286 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.legacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coins.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confucius.eastasian.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.iadb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid.usmle.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cqn-erc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmtest.eastdunbarton.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd7.cmc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd7store.juilliard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daniela.patch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design-engineering.princeton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-camdenbase.libraries.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-covid19.chop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-lp-jhubsph.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-web-degacc.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-web-jhucareycoop.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www2.ofx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.business-services.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cee.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.champions-speakers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dhsri.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ece.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.embody.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.engineering.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ptp.brown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.shibtest7.isc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wrightlaboratory.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wti.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.engineering.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.si.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devdr.azmex.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dial.sralab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlpe.calc.gatech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.spcs.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmats.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebot200.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecalso.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecc.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehs.sph.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eis.dev.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embody.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engaginghumanities.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engineering.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'environment.research.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventsinfo.presidio.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expeditions.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.hunterbusinessschool.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploringthecomplexity.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faculty.gsm.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fecc.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flta.cli.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gem.business.ucdenver.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.pima.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcertificates.cookbookcooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gil.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveto.shawnee.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpf.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsefilms.gse.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtpe.pe.gatech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcii.cs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthed.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthsciences.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host2.cenmi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host2.openminds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host3.cenmi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host90.farmermac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr-kiosk.tsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'httpbin.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iam.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igert.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'india-test.generation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industri40.ida.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info-dev.calperformances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.vcfa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infonet.fia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inks.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.gc.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.kjzz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.gcir.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international.research.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetcouncil.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.olivecrest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv6.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-chat.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.22squared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcatalyst.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iteachu.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000183dba4005c000004030046304402200eaf0c9fe3528602f46dd7779d859d83c621b996f478b585cac6635543a146f702203dd01807291effbd87b8bcb132d248a29ef3b90eaa44e3f041076ce2d386845b0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000183dba400690000040300473045022100d3897c563669e7ffc2c4dba107e40c1c7370a8ea2d9e51499c1d4bdc3d156b5b02205247dc02f55422c9ffa6eb0a2f144c109a69a1b7205e8afe843c1728f7152b72
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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