www.ubsi.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:61:ad:13:02:d7:84:b0:e2:70:2c:0e:46:90:ca:3b:6c:36 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ubsi.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:61:ad:13:02:d7:84:b0:e2:70:2c:0e:46:90:ca:3b:6c:36
Serial Number (int): 381686588472923060159615113803354104097846
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 98:2c:ce:fa:e9:b4:58:f2:73:9d:6e:b9:ee:87:7a:3c:3a:0a:bf:86
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 32:c8:6e:49:ef:2e:dc:72:b3:5f:92:74:bc:c6:84:bd:77:3b:9a:f6
Fingerprint (sha256): 95:84:11:50:10:a4:fc:31:ab:37:3c:10:cd:84:13:0f:b9:98:ab:df:3b:2c:a2:c8:ae:38:d7:d5:ff:89:3b:b1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ubsi.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ubsi.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alkanza.org
arsenalbio.org
azitra.org
bankcda.org
barn2door.org
bespokefinancial.org
bodyvision.org
celigo.org
coinroutes.org
dinogroup.org
douugh.org
dsccap.org
fazua.org
firstbankonline.org
gobear.org
gravie.org
hellooffice.org
hixme.org
independencebank.org
indiva.org
inshur.org
instarem.org
localytics.org
marginedge.org
mayvenn.org
medinas.org
namogoo.org
netwealth.org
nkid.org
nocd.org
northzone.org
opthea.org
otoma.org
pacificwestbank.org
papayaglobal.org
pinteon.org
qorvo.org
qupital.org
rivergreen.org
sengine.org
sgatoken.cc
statpro.org
synapsefi.org
ubsi.org
veritexbank.org
viracta.org
vouchinsurance.org
voxel8.org
westchesterbank.org
workona.org
www.alkanza.org
www.arsenalbio.org
www.azitra.org
www.bankcda.org
www.barn2door.org
www.bespokefinancial.org
www.bodyvision.org
www.celigo.org
www.coinroutes.org
www.dinogroup.org
www.douugh.org
www.dsccap.org
www.fazua.org
www.firstbankonline.org
www.gobear.org
www.gravie.org
www.hellooffice.org
www.hixme.org
www.independencebank.org
www.indiva.org
www.inshur.org
www.instarem.org
www.localytics.org
www.marginedge.org
www.mayvenn.org
www.medinas.org
www.namogoo.org
www.netwealth.org
www.nkid.org
www.nocd.org
www.northzone.org
www.opthea.org
www.otoma.org
www.pacificwestbank.org
www.papayaglobal.org
www.pinteon.org
www.qorvo.org
www.qupital.org
www.rivergreen.org
www.sengine.org
www.sgatoken.cc
www.statpro.org
www.synapsefi.org
www.ubsi.org
www.veritexbank.org
www.viracta.org
www.vouchinsurance.org
www.voxel8.org
www.westchesterbank.org
www.workona.org

Other certificates including the domain name ubsi.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ubsi.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweG6ZbN8DWiydDMM5FQT
L/q63pobKsLQpfBQR+VHQgpRf1yooOyVyvnXCFWEAANGPB+H4FwNwVwypkwm2QMI
ddq9PFST/TL27Qg2bYlYT/0GN8vyZbnL7W4qxx2TwdrWQgBIqjR2DddhRljuYzD0
geZNBuHoorsxlYjtBii0L3Us8U359j57GGgP7SgZ/nNK/Ex8FJRZn04zgoTjte1/
GryRoow5kXLEgX79ZwupeX/UvDjP93j1GAYZvIbRrH169nAUywSYC3VYz7J+nfHL
PM1GWGVP+HFeA0myT8E50vvDY1pI8ZoiCfo61RAM6TVh0UwgtFbSVyh2nT0U3wWp
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381686588472923060159615113803354104097846
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-10 21:04:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-09 21:04:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ubsi.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24475303540234225512746003825533729271560601988316738187905512065870366766503625757674345281120106563930839689375758538374457842670646948272210046362861684625529378590168620692843256244130426512443229993617856723977797135669397593727407443691499342520770990296463209035368100589603424867232900430789356415271643875607736921359908251447872894044603221612159656164198071463201343929333912941356287305267049927935215122806865187950810234090230367368367315304475498082049019208885736239837873768238687613136553234416194583860949087844062888017475236359939041273379097653336512542970061598510842034708251703830352979405151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							982ccefae9b458f2739d6eb9ee877a3c3a0abf86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1632 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alkanza.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsenalbio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azitra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankcda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barn2door.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bespokefinancial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodyvision.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celigo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coinroutes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dinogroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'douugh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsccap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fazua.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstbankonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobear.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gravie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellooffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hixme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'independencebank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inshur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instarem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localytics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marginedge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayvenn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medinas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namogoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netwealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nkid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nocd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northzone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opthea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otoma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacificwestbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papayaglobal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinteon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qorvo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qupital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivergreen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sengine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgatoken.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statpro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synapsefi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubsi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veritexbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viracta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vouchinsurance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voxel8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westchesterbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workona.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alkanza.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arsenalbio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azitra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankcda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barn2door.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bespokefinancial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodyvision.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celigo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coinroutes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dinogroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douugh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsccap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fazua.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstbankonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gobear.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gravie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hellooffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hixme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.independencebank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inshur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.instarem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.localytics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marginedge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayvenn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medinas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.namogoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netwealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nkid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nocd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northzone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opthea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otoma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pacificwestbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papayaglobal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinteon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qorvo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qupital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivergreen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sengine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgatoken.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statpro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.synapsefi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubsi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veritexbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viracta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vouchinsurance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voxel8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westchesterbank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workona.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ef1d811e00000040300473045022071d512b22b710098458a682cad454103d1ffe5481b518bfe39fd1a218f44a2d9022100ab27b72daed4379c9c1689c33c4ccc43bd837e2a00502e95466c09206580847a0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ef1d8121000000403004730450221009ba55edca486db7b3f96bb6d12a2e63ddf5ccd2d5daa8af3f30bc375d0e1334402201c7a44ebf367c151bb8396c4a516b3500d8f6da4a4cf35acdb1899653449e439
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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