yakamafish-star.net

Issued by R3

About this certificate

This digital certificate with serial number 04:eb:11:95:58:6f:ae:60:56:c5:94:f8:6d:a0:9e:40:8c:c0 was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=yakamafish-star.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:eb:11:95:58:6f:ae:60:56:c5:94:f8:6d:a0:9e:40:8c:c0
Serial Number (int): 428438872275322128778330842906733098077376
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 04:44:6a:c8:a3:19:d5:b1:4a:73:7c:58:7f:b7:f5:6c:39:01:b2:62
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f8:e2:75:5a:fc:a0:2b:e1:b7:20:a5:f8:df:9e:9f:8b:f0:00:53:36
Fingerprint (sha256): a2:aa:68:89:98:cc:3c:56:29:03:2d:42:73:69:c6:29:ed:44:de:81:c3:5c:4b:50:3b:77:f3:f5:b8:6e:7a:7a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate yakamafish-star.net

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yakamafish-star.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alex.rcpd.msu.edu
asdf-hk1.trust.webdev.wustl.edu
backend-dev.americancouncils.org
badnar-lotre.dev.cms2.asa.uw.edu
bannext.rockhurst.edu
bo-togel-terbesar.as-coa.org
bukumimpi.gsm.cornell.edu
cfr-map-nov-pr.cfr.org
cogito.umbc.edu
datasgp.gsm.cornell.edu
default.chemonics.com
devuploadgg-terbesar.as-coa.org
faculty.kettering.edu
global7.gsm.cornell.edu
heng-heng.gsm.cornell.edu
idnpoker.ampaconline.org
ini-buat-dev-macaubet.naeyc.org
ini-buat-test-macaubet.naeyc.org
iplf.archbalt.org
ips-tst.chop.edu
it.gsm.cornell.edu
joker-gaming.academic.gsm.cornell.edu
joker123.academic.gsm.cornell.edu
joker123.gsm.cornell.edu
joker123.platform01.tufts.edu
kimochi.conferences.psu.edu
kirkpatrickchoir.rutgers.edu
link-togel.ctd.northwestern.edu
live-draw-sdy.assumption.edu
live-legacy-auth.dailywire.com
lobby.dev.oceana.org
macaubet.naeyc.org
mahjong-ways.academic.gsm.cornell.edu
maxwin.gsm.cornell.edu
maxwin.platform01.tufts.edu
mix-parlay.connorsstate.edu
mixparlay.conferences.psu.edu
online.assumption.edu
pharmacy.th.ajc.org
pophealth.uahs.arizona.edu
prenursing.nebrwesleyan.edu
remote.cnsnews.com
rtp-live.ctd.northwestern.edu
rtp-live.gsm.cornell.edu
rtplive.gsm.cornell.edu
securitytips.blogs.govdelivery.com
situs-togel.test.webservices.umich.edu
situstoto.ty.th.ajc.org
slot-gacor.m.gsm.cornell.edu
slot-gacor.platform01.tufts.edu
slot-joker.academic.gsm.cornell.edu
slot-terbaru.todb.ca.gov
slot5000-devs.todb.ca.gov
slot5000-tests.todb.ca.gov
slot5000.todb.ca.gov
slotgacormaxwin.live.oceana.org
soe.conferences.psu.edu
staging.test.webservices.umich.edu
tesuploadssgg.as-coa.org
www.bannext.rockhurst.edu
www.comm.franklin.uga.edu
www.devoslab.franklinresearch.uga.edu
www.iti.rutgers.edu
www.ling.franklin.uga.edu
www.tx.audubon.org
yakamafish-star.net

Other certificates including the domain name yakamafish-star.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for yakamafish-star.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw46iRMF7hwNtVI+uKl5U
F0CD5U3UkQMeBF8svfU9dGopQU40Ing2QVq1B+BFMG1Mn7ICzhEdYaQd/8z2o4yC
SvEOruHHbvRx9j8NrkB2VDdThoomFKEa0Ycr+N7Jt9BiGuqfFFcgkf3J61GgtdOf
eb3u1E1vLfFD14HJmJGlDtvFwp7KtZmSuKnUDvttZApeghzlw1S+QrS7sZo5epN5
As25V4MVnW5dTJFTfmhnbB9vkhJDh+O6DeLYszX0dSxVrsGI66gIDvk8vwZ1a2is
lILGQ2WDC/2oWV2R+PvWHZuUKqzLGtROWGuvZLR0QziNDryF+cVGICsOtMyOuvv4
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428438872275322128778330842906733098077376
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-08 22:50:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-09 22:50:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yakamafish-star.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24686804846986700463286235473113579310640311389133520587690101062602581528438869452339616892952701902849061179936484875175962958584343852540185544183047237885328788321992471394861784671407872629842251491403749912828485536459849583589245555154424957554500881276697578384568150008763221433348736210875490343848174039032910683409070497266386346837523561884554602537558352214849828580677730541219147370984863199779155273255284942666036956568962165193514919553059246300356407560953783348314569168119667241859434381348711752591025577632034019588909291610597210916265772008296336673389410930207470033159467095714263857887333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04446ac8a319d5b14a737c587fb7f56c3901b262
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1839 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alex.rcpd.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asdf-hk1.trust.webdev.wustl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend-dev.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badnar-lotre.dev.cms2.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bannext.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-togel-terbesar.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bukumimpi.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfr-map-nov-pr.cfr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogito.umbc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datasgp.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'default.chemonics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devuploadgg-terbesar.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faculty.kettering.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global7.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heng-heng.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idnpoker.ampaconline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ini-buat-dev-macaubet.naeyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ini-buat-test-macaubet.naeyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iplf.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ips-tst.chop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joker-gaming.academic.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joker123.academic.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joker123.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joker123.platform01.tufts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimochi.conferences.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirkpatrickchoir.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-togel.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-draw-sdy.assumption.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-legacy-auth.dailywire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lobby.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macaubet.naeyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahjong-ways.academic.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxwin.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxwin.platform01.tufts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mix-parlay.connorsstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mixparlay.conferences.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.assumption.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacy.th.ajc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pophealth.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prenursing.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.cnsnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtp-live.ctd.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtp-live.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtplive.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitytips.blogs.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situs-togel.test.webservices.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situstoto.ty.th.ajc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-gacor.m.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-gacor.platform01.tufts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-joker.academic.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-terbaru.todb.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot5000-devs.todb.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot5000-tests.todb.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot5000.todb.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slotgacormaxwin.live.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soe.conferences.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.test.webservices.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesuploadssgg.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bannext.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comm.franklin.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devoslab.franklinresearch.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iti.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ling.franklin.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tx.audubon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yakamafish-star.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186337008340000040300483046022100f5f474c6bddb984b7f0c34a0fa088234ac75df3c779bf2294898841c64f8191c022100ede0f58dc2bb65107bb85f1d9848a814ef1607c0b11ab01b0740a1f9245643d5007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001863370082d000004030047304502200a9bba176372cd7d17f433d56caefefc363aa2d02cbac0965b4e161b134fcc59022100d98583d6443a6d882a3ace3517372cd72e3367861a5cc1f862ff814ff5abcfe2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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