marketing.magicsoftware.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ac:06:e5:d6:63:95:cd:e6:1c:94:43:3b:70:bf:17:c5:3a was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=marketing.magicsoftware.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ac:06:e5:d6:63:95:cd:e6:1c:94:43:3b:70:bf:17:c5:3a
Serial Number (int): 406986879589723321726257911717288035730746
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c6:5b:91:c2:c8:b3:bc:01:60:32:92:d7:18:df:11:c9:5e:13:63:79
Fingerprint (sha256): 9d:44:68:9d:a6:16:41:88:82:19:25:c0:ef:16:85:54:72:66:44:13:d7:62:0a:f8:83:da:ab:8c:e3:b2:38:a0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate marketing.magicsoftware.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marketing.magicsoftware.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marketing.magicsoftware.com
marketingprojects.maryville.edu
mediaroom.livestrong.org
meetingsqa.aaas.org
mobile-data.skyandtelescope.com
msa2016.berkeley.edu
nanophotonics.asu.edu
nartc.fcm.arizona.edu
news.ged.com
next.warnerpacific.edu
odl.rutgers.edu
oist.ucsb.edu
oldsite.itu.edu
online.asu.edu
online.ece.udel.edu
online.foodsafety.msu.edu
ordbc.arizona.edu
partners.starleaf.com
parttime.carey.jhu.edu
pcp.sonoranucedd.fcm.arizona.edu
pharmacy.ss.pacific.edu
pophealth.uahs.arizona.edu
powertest.ctd.northwestern.edu
programs.carey.jhu.edu
projectshare.sfsu.edu
psp.sandiegozoo.org
psych.lifesci.ucsb.edu
qa.canceratlas.cancer.org
querybuilder.appcelerator.com
radsafe.berkeley.edu
rc.library.osu.edu
religion.berkeley.edu
research-pp.stonybrook.edu
resx.usc.edu
reweb.archbalt.org
rgd2020.rutgers.edu
rheumatology.utoronto.ca
rmp.rutgers.edu
rpgp.berkeley.edu
rstinstruments.rstinstruments.com
rstinstrumentsinfo.rstinstruments.com
scilsresx.rutgers.edu
sdgs-staging.scout.org
sexgenderlab.human.cornell.edu
smagent.ctd.northwestern.edu
sourceu.warnerpacific.edu
stage.onlineeducation.psu.edu
stanfordsummersession.stanford.edu
states.drugpolicy.org
stfincrease.unlv.edu
support.doctorswithoutborders.org
swfwmd.state.fl.us
t.wholegrainscouncil.org
tango.franklin.uga.edu
test-web-lws.edu.help
test.2.www.upenn.edu
test.aep.cornell.edu
test.cam.cornell.edu
test.cee.cornell.edu
test.cochise.az.gov
test.ethics3.pantheon.berkeley.edu
test.finance.upenn.edu
test.mae.cornell.edu
test.makinghistory.gwu.edu
test.mse.cornell.edu
test.ocio.osu.edu
test.radcliffe.edu
test.slp.gse.upenn.edu
test.utrp.gse.upenn.edu
testb.test.uis.georgetown.edu
tl.wvu.edu
townofdiscoverybay.ca.gov
townsendlab.berkeley.edu
transitions.metrotech.edu
trustees365.thetrustees.org
tst.dhsri.yale.edu
tst.ergo.yale.edu
tst.gisf.yale.edu
tst.odonnelllab.research.yale.edu
updates.cjei.cornell.edu
updates.cpra.cornell.edu
upenn-it.asc.upenn.edu
virtual2.unlv.edu
vmusa.corpny.restorationplaza.org
vpr.arizona.edu
wanprc.washington.edu
web.commerce.virginia.edu
web.stjohns.edu.help
webdev.colorado.edu
website.wells.edu
webtest.tsu.edu
winter.arizona.edu
wireless.unlv.edu
wissc.arizona.edu
wp.americancouncils.org
wp.mwcc.edu
ww.thetrustees.org
www-chem.umd.edu
www.adobe.arizona.edu

Other certificates including the domain name magicsoftware.com

(limited to 100 certificates)
it.uahs.arizona.edu
5130657403502592-fe4.pantheonsite.io
5130657403502592-fe4.pantheonsite.io
magicsoftware.com
5748418722922496-fe2.pantheonsite.io
5130657403502592-fe4.pantheonsite.io
e.magicsoftware.com
hub.meed.com
live.ucdavis.edu
5748418722922496-fe2.pantheonsite.io
5130657403502592-fe4.pantheonsite.io
5695716924063744-fe4.pantheonsite.io
good.gsm.cornell.edu
5130657403502592-fe4.pantheonsite.io
5695716924063744-fe4.pantheonsite.io
5695716924063744-fe4.pantheonsite.io
liberalarts.ss.pacific.edu
expeditions.sandiegozoo.org
account.growthspace.com
host2.openminds.com
5130657403502592-fe4.pantheonsite.io
m.ajc.org
5748418722922496-fe2.pantheonsite.io
5130657403502592-fe4.pantheonsite.io
5130657403502592-fe4.pantheonsite.io
5748418722922496-fe2.pantheonsite.io
5130657403502592-fe4.pantheonsite.io
5130657403502592-fe4.pantheonsite.io
5714772351778816-fe3.pantheonsite.io
live.bme.cornell.edu
5130657403502592-fe4.pantheonsite.io
5130657403502592-fe4.pantheonsite.io
labellelab.asu.edu
5130657403502592-fe4.pantheonsite.io
account.growthspace.com
legacy.hq.philabundance.org
inside.gc.cuny.edu
5748418722922496-fe2.pantheonsite.io
live.ophd.pantheon.berkeley.edu
www.magicsoftware.com
5130657403502592-fe4.pantheonsite.io
5748418722922496-fe2.pantheonsite.io
5714772351778816-fe3.pantheonsite.io
international.dev.oceana.org
5130657403502592-fe4.pantheonsite.io
5130657403502592-fe4.pantheonsite.io
5130657403502592-fe4.pantheonsite.io
junk.dana.org
5714772351778816-fe3.pantheonsite.io
www.magicsoftware.com
adapt.magicsoftware.com
5748418722922496-fe2.pantheonsite.io
account.growthspace.com
5714772351778816-fe3.pantheonsite.io
5748418722922496-fe2.pantheonsite.io
account.growthspace.com
account.growthspace.com
5695716924063744-fe4.pantheonsite.io
liberalarts.ss.pacific.edu
5130657403502592-fe4.pantheonsite.io
5695716924063744-fe4.pantheonsite.io
live.ucdavis.edu
lp.programs.carey.jhu.edu.help
5748418722922496-fe2.pantheonsite.io
5748418722922496-fe2.pantheonsite.io
intranet.olivecrest.org
www.magicsoftware.com
account.growthspace.com
5130657403502592-fe4.pantheonsite.io
5714772351778816-fe3.pantheonsite.io
lp.grad.online.udel.edu.help
laborlabsandbox.aflcio.org
5748418722922496-fe2.pantheonsite.io
e.magicsoftware.com
5714772351778816-fe3.pantheonsite.io
5130657403502592-fe4.pantheonsite.io
industri40.ida.dk
5130657403502592-fe4.pantheonsite.io
info-dev.calperformances.org
5130657403502592-fe4.pantheonsite.io
5748418722922496-fe2.pantheonsite.io
5130657403502592-fe4.pantheonsite.io
www.magicsoftware.com
5130657403502592-fe4.pantheonsite.io
internal.gcir.org
5714772351778816-fe3.pantheonsite.io
5714772351778816-fe3.pantheonsite.io
account.growthspace.com
5748418722922496-fe2.pantheonsite.io
5130657403502592-fe4.pantheonsite.io
eduhup.com
junk.dana.org
5695716924063744-fe4.pantheonsite.io
eduhup.com
5130657403502592-fe4.pantheonsite.io
5130657403502592-fe4.pantheonsite.io
5714772351778816-fe3.pantheonsite.io
international.research.ucsb.edu
5130657403502592-fe4.pantheonsite.io
leeanatankersley.com

Certificate

The complete raw certificate details for marketing.magicsoftware.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINbTCCDFWgAwIBAgISBKwG5dZjlc3mHJRDO3C/F8U6MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjEwMTIxOTEwNDhaFw0yMzAxMTAxOTEwNDdaMCYxJDAiBgNVBAMT
G21hcmtldGluZy5tYWdpY3NvZnR3YXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANZKyxomORzTPc9TPQeltlDYS3dlmXBOwG/CzHq62y+TmwCy
59Di6eBCG1vMC8HHb3f8VzJi0Zw+bR31yMeGxJMUTxCavwflJs9c49ZObtihSmUh
hsTqNe8EZ8kiaAYBcNdi6lFCFuVphH5osQhb+FgzeGjPlFYsGAahsNm0utN87ZtP
7VljmsMcr6rbsj2L67DAdGMk5mowr7N9SgeY+7BvUNbiobect8R12vwVghZWO//a
7r1pahXIQw1Y5e/wSw1hHhwUY9zykrcls/MTzA2Mn3HsxSfkWZDd6HNsyboOQfy3
rZI23IPeLhBmysl7oPcvw6IFVvAIpLHzH2oGwMUCAwEAAaOCCocwggqDMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUPJsXacm0uhAjQCM6azaFAmzTwdUwHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wgglIBgNVHREEggk/MIIJO4IbbWFya2V0aW5nLm1hZ2lj
c29mdHdhcmUuY29tgh9tYXJrZXRpbmdwcm9qZWN0cy5tYXJ5dmlsbGUuZWR1ghht
ZWRpYXJvb20ubGl2ZXN0cm9uZy5vcmeCE21lZXRpbmdzcWEuYWFhcy5vcmeCH21v
YmlsZS1kYXRhLnNreWFuZHRlbGVzY29wZS5jb22CFG1zYTIwMTYuYmVya2VsZXku
ZWR1ghVuYW5vcGhvdG9uaWNzLmFzdS5lZHWCFW5hcnRjLmZjbS5hcml6b25hLmVk
dYIMbmV3cy5nZWQuY29tghZuZXh0Lndhcm5lcnBhY2lmaWMuZWR1gg9vZGwucnV0
Z2Vycy5lZHWCDW9pc3QudWNzYi5lZHWCD29sZHNpdGUuaXR1LmVkdYIOb25saW5l
LmFzdS5lZHWCE29ubGluZS5lY2UudWRlbC5lZHWCGW9ubGluZS5mb29kc2FmZXR5
Lm1zdS5lZHWCEW9yZGJjLmFyaXpvbmEuZWR1ghVwYXJ0bmVycy5zdGFybGVhZi5j
b22CFnBhcnR0aW1lLmNhcmV5LmpodS5lZHWCIHBjcC5zb25vcmFudWNlZGQuZmNt
LmFyaXpvbmEuZWR1ghdwaGFybWFjeS5zcy5wYWNpZmljLmVkdYIacG9waGVhbHRo
LnVhaHMuYXJpem9uYS5lZHWCHnBvd2VydGVzdC5jdGQubm9ydGh3ZXN0ZXJuLmVk
dYIWcHJvZ3JhbXMuY2FyZXkuamh1LmVkdYIVcHJvamVjdHNoYXJlLnNmc3UuZWR1
ghNwc3Auc2FuZGllZ296b28ub3JnghZwc3ljaC5saWZlc2NpLnVjc2IuZWR1ghlx
YS5jYW5jZXJhdGxhcy5jYW5jZXIub3Jngh1xdWVyeWJ1aWxkZXIuYXBwY2VsZXJh
dG9yLmNvbYIUcmFkc2FmZS5iZXJrZWxleS5lZHWCEnJjLmxpYnJhcnkub3N1LmVk
dYIVcmVsaWdpb24uYmVya2VsZXkuZWR1ghpyZXNlYXJjaC1wcC5zdG9ueWJyb29r
LmVkdYIMcmVzeC51c2MuZWR1ghJyZXdlYi5hcmNoYmFsdC5vcmeCE3JnZDIwMjAu
cnV0Z2Vycy5lZHWCGHJoZXVtYXRvbG9neS51dG9yb250by5jYYIPcm1wLnJ1dGdl
cnMuZWR1ghFycGdwLmJlcmtlbGV5LmVkdYIhcnN0aW5zdHJ1bWVudHMucnN0aW5z
dHJ1bWVudHMuY29tgiVyc3RpbnN0cnVtZW50c2luZm8ucnN0aW5zdHJ1bWVudHMu
Y29tghVzY2lsc3Jlc3gucnV0Z2Vycy5lZHWCFnNkZ3Mtc3RhZ2luZy5zY291dC5v
cmeCHnNleGdlbmRlcmxhYi5odW1hbi5jb3JuZWxsLmVkdYIcc21hZ2VudC5jdGQu
bm9ydGh3ZXN0ZXJuLmVkdYIZc291cmNldS53YXJuZXJwYWNpZmljLmVkdYIdc3Rh
Z2Uub25saW5lZWR1Y2F0aW9uLnBzdS5lZHWCInN0YW5mb3Jkc3VtbWVyc2Vzc2lv
bi5zdGFuZm9yZC5lZHWCFXN0YXRlcy5kcnVncG9saWN5Lm9yZ4IUc3RmaW5jcmVh
c2UudW5sdi5lZHWCIXN1cHBvcnQuZG9jdG9yc3dpdGhvdXRib3JkZXJzLm9yZ4IS
c3dmd21kLnN0YXRlLmZsLnVzghh0Lndob2xlZ3JhaW5zY291bmNpbC5vcmeCFnRh
bmdvLmZyYW5rbGluLnVnYS5lZHWCFXRlc3Qtd2ViLWx3cy5lZHUuaGVscIIUdGVz
dC4yLnd3dy51cGVubi5lZHWCFHRlc3QuYWVwLmNvcm5lbGwuZWR1ghR0ZXN0LmNh
bS5jb3JuZWxsLmVkdYIUdGVzdC5jZWUuY29ybmVsbC5lZHWCE3Rlc3QuY29jaGlz
ZS5hei5nb3aCInRlc3QuZXRoaWNzMy5wYW50aGVvbi5iZXJrZWxleS5lZHWCFnRl
c3QuZmluYW5jZS51cGVubi5lZHWCFHRlc3QubWFlLmNvcm5lbGwuZWR1ghp0ZXN0
Lm1ha2luZ2hpc3RvcnkuZ3d1LmVkdYIUdGVzdC5tc2UuY29ybmVsbC5lZHWCEXRl
c3Qub2Npby5vc3UuZWR1ghJ0ZXN0LnJhZGNsaWZmZS5lZHWCFnRlc3Quc2xwLmdz
ZS51cGVubi5lZHWCF3Rlc3QudXRycC5nc2UudXBlbm4uZWR1gh10ZXN0Yi50ZXN0
LnVpcy5nZW9yZ2V0b3duLmVkdYIKdGwud3Z1LmVkdYIZdG93bm9mZGlzY292ZXJ5
YmF5LmNhLmdvdoIYdG93bnNlbmRsYWIuYmVya2VsZXkuZWR1ghl0cmFuc2l0aW9u
cy5tZXRyb3RlY2guZWR1ght0cnVzdGVlczM2NS50aGV0cnVzdGVlcy5vcmeCEnRz
dC5kaHNyaS55YWxlLmVkdYIRdHN0LmVyZ28ueWFsZS5lZHWCEXRzdC5naXNmLnlh
bGUuZWR1giF0c3Qub2Rvbm5lbGxsYWIucmVzZWFyY2gueWFsZS5lZHWCGHVwZGF0
ZXMuY2plaS5jb3JuZWxsLmVkdYIYdXBkYXRlcy5jcHJhLmNvcm5lbGwuZWR1ghZ1
cGVubi1pdC5hc2MudXBlbm4uZWR1ghF2aXJ0dWFsMi51bmx2LmVkdYIhdm11c2Eu
Y29ycG55LnJlc3RvcmF0aW9ucGxhemEub3Jngg92cHIuYXJpem9uYS5lZHWCFXdh
bnByYy53YXNoaW5ndG9uLmVkdYIZd2ViLmNvbW1lcmNlLnZpcmdpbmlhLmVkdYIU
d2ViLnN0am9obnMuZWR1LmhlbHCCE3dlYmRldi5jb2xvcmFkby5lZHWCEXdlYnNp
dGUud2VsbHMuZWR1gg93ZWJ0ZXN0LnRzdS5lZHWCEndpbnRlci5hcml6b25hLmVk
dYIRd2lyZWxlc3MudW5sdi5lZHWCEXdpc3NjLmFyaXpvbmEuZWR1ghd3cC5hbWVy
aWNhbmNvdW5jaWxzLm9yZ4ILd3AubXdjYy5lZHWCEnd3LnRoZXRydXN0ZWVzLm9y
Z4IQd3d3LWNoZW0udW1kLmVkdYIVd3d3LmFkb2JlLmFyaXpvbmEuZWR1MEwGA1Ud
IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G
CSqGSIb3DQEBCwUAA4IBAQC1a3nfwrp3WtsO216m1FSgZGPfIXP3F3ucL0NAAmIG
Yu1DR0/8axG+vx6Jf7Ol4IInSXuKSmd1J9P3OwRbJ9Y4YIAheqSgu0YOOeBv6Ryf
BeYhC4N/bUWMeyz3FTRvfxPxdG8H8kq0t/qlwa+rLmFFl+gxhRlxNqHvKottJbMh
tsSGIJ105hJuKnHa409WrZ3AH6BqtnSclImldHfpA7isf+cbjgYAFdJ4wjbxDumL
pJjbQnsroEpUFHg2ZHAR1AUqpDHvOsGbD2rHoB7upuqSFJn2sMumwQxoagvnllW3
C1e8T6hp0kqi4CntGNM7mFgOiyASlUzmyK12vrI6sFar
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406986879589723321726257911717288035730746
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-12 19:10:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-10 19:10:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marketing.magicsoftware.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.magicsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingprojects.maryville.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaroom.livestrong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetingsqa.aaas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-data.skyandtelescope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msa2016.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanophotonics.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.ged.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.warnerpacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odl.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oist.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldsite.itu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.ece.udel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.foodsafety.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordbc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.starleaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parttime.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcp.sonoranucedd.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacy.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pophealth.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powertest.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programs.carey.jhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectshare.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psp.sandiegozoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psych.lifesci.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.canceratlas.cancer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'querybuilder.appcelerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsafe.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc.library.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religion.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research-pp.stonybrook.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resx.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reweb.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgd2020.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rheumatology.utoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmp.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpgp.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstruments.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstinstrumentsinfo.rstinstruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scilsresx.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdgs-staging.scout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexgenderlab.human.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smagent.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourceu.warnerpacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.onlineeducation.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanfordsummersession.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'states.drugpolicy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfincrease.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.doctorswithoutborders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swfwmd.state.fl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.wholegrainscouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tango.franklin.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-web-lws.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.2.www.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cee.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cochise.az.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ethics3.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.finance.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mae.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mse.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ocio.osu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.radcliffe.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.slp.gse.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.utrp.gse.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testb.test.uis.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tl.wvu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townofdiscoverybay.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townsendlab.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transitions.metrotech.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustees365.thetrustees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.dhsri.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.ergo.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.gisf.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.odonnelllab.research.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.cjei.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.cpra.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upenn-it.asc.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtual2.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmusa.corpny.restorationplaza.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpr.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanprc.washington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.commerce.virginia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.stjohns.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdev.colorado.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'website.wells.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtest.tsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winter.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wireless.unlv.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wissc.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.mwcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.thetrustees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-chem.umd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adobe.arizona.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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