clams.aspendiscovery.org

Issued by R3

About this certificate

This digital certificate with serial number 03:3d:67:11:73:60:eb:b8:75:7f:32:2c:36:0a:74:63:68:8b was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=clams.aspendiscovery.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3d:67:11:73:60:eb:b8:75:7f:32:2c:36:0a:74:63:68:8b
Serial Number (int): 282231083270226387633949857369543911106699
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7d:6f:aa:f5:26:b6:99:59:62:ef:65:13:3e:eb:7e:62:6b:7e:37:34
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f1:52:12:67:01:1d:d9:5f:58:98:1b:c5:c6:cf:21:d8:88:c5:22:89
Fingerprint (sha256): a5:e3:4b:5a:56:15:a5:6d:0c:05:85:80:05:94:ce:02:68:6e:a3:19:66:95:34:46:6d:b8:fd:68:71:73:e2:12

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate clams.aspendiscovery.org

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clams.aspendiscovery.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquinnah.aspendiscovery.org
aquinnah.clamsnet.org
barnstable-sturgis.clamsnet.org
barnstable.aspendiscovery.org
bourne.aspendiscovery.org
bourne.clamsnet.org
brewster-ladies.clamsnet.org
brewster.aspendiscovery.org
cccc-wilkens.clamsnet.org
ccccwilkens.aspendiscovery.org
centerville.aspendiscovery.org
centerville.clamsnet.org
chatham-eldredge.clamsnet.org
chilmark.aspendiscovery.org
chilmark.clamsnet.org
clams.aspendiscovery.org
clamsnet.org
cotuit.aspendiscovery.org
cotuit.clamsnet.org
dennis-east-jacob-sears.clamsnet.org
dennis-memorial.clamsnet.org
dennis-public.clamsnet.org
dennis-south.clamsnet.org
dennis-west.clamsnet.org
dennismemorial.aspendiscovery.org
dennispublic.aspendiscovery.org
dennissouth.aspendiscovery.org
denniswest.aspendiscovery.org
eastham.aspendiscovery.org
eastham.clamsnet.org
edgartown.aspendiscovery.org
edgartown.clamsnet.org
eldredge.aspendiscovery.org
falmouth-public.clamsnet.org
falmouth-west.clamsnet.org
falmouthpublic.aspendiscovery.org
falmouthwest.aspendiscovery.org
harwich-brooks.clamsnet.org
harwichbrooks.aspendiscovery.org
hyannis.aspendiscovery.org
hyannis.clamsnet.org
jacobsears.aspendiscovery.org
kidsclams.aspendiscovery.org
library.clamsnet.org
lida.clamsnet.org
marstons-mills.clamsnet.org
mashpee.aspendiscovery.org
mashpee.clamsnet.org
mmp.aspendiscovery.org
nantucket-atheneum.clamsnet.org
nantucket.aspendiscovery.org
oak-bluffs.clamsnet.org
oakbluffs.aspendiscovery.org
orleans-snow.clamsnet.org
osterville.aspendiscovery.org
osterville.clamsnet.org
provincetown.aspendiscovery.org
provincetown.clamsnet.org
snow.aspendiscovery.org
truro.aspendiscovery.org
truro.clamsnet.org
vineyard-haven.clamsnet.org
vineyardhaven.aspendiscovery.org
wellfleet.aspendiscovery.org
wellfleet.clamsnet.org
west-barnstable-whelden.clamsnet.org
west-tisbury.clamsnet.org
westtisbury.aspendiscovery.org
whelden.aspendiscovery.org
woods-hole.clamsnet.org
woodshole.aspendiscovery.org
yarmouth-port.clamsnet.org
yarmouth-town.clamsnet.org
yarmouthport.aspendiscovery.org
yarmouthtown.aspendiscovery.org

Other certificates including the domain name aspendiscovery.org

(limited to 100 certificates)
catalog.plumcreeklibrary.net
catalog.eulesstx.gov
abbotsford.aspendiscovery.org
opac.westchesterlibraries.org
www.uintahlibrary.org
evpl.aspendiscovery.org
darien.aspendiscovery.org
cadl.aspendiscovery.org
vokal-aspen.bywatersolutions.com
catalog.eulesstx.gov
librarycat.marionfl.org
catalog.eulesstx.gov
mckinney.aspendiscovery.org
blackgold.org
mcpl.aspendiscovery.org
clams.aspendiscovery.org
opac.westchesterlibraries.org
gmilcs.aspendiscovery.org
acpl.us
spokane.aspendiscovery.org
pit.aspendiscovery.org
catalog.sbplibrary.org
vokal-aspen.bywatersolutions.com
catalog.santafelibrary.org
monterey.aspendiscovery.org
bywaterconsortium.aspendiscovery.org
metrolibrary.aspendiscovery.org
help.aspendiscovery.org
mountainview.aspendiscovery.org
gmilcs.aspendiscovery.org
catalog.dubcolib.org
blackgold.org
gmilcs.aspendiscovery.org
catalog.dmpl.org
corvallis.aspendiscovery.org
clams.aspendiscovery.org
vokal-aspen.bywatersolutions.com
cedarpark.aspendiscovery.org
readokaloosa.org
ainsworth.aspendiscovery.org
blackgold.org
www.uintahlibrary.org
catalog.eulesstx.gov
blackgold.org
vokal-aspen.bywatersolutions.com
mountainview.aspendiscovery.org
catalog.sbplibrary.org
huntsville.aspendiscovery.org
bywaterconsortium.aspendiscovery.org
clams.aspendiscovery.org
clams.aspendiscovery.org
blackgold.org
cat.ryepubliclibrary.org
aacpl.aspendiscovery.org
acpl.us
prosper.aspendiscovery.org
ramapo-koha.aspendiscovery.org
clams.aspendiscovery.org
acpl.us
corvallis.aspendiscovery.org
prosper.aspendiscovery.org
blackgold.org
pasco.aspendiscovery.org
ainsworth.aspendiscovery.org
catalog.slolibrary.org
metrolibrary.aspendiscovery.org
payson.aspendiscovery.org
fayetteville.aspendiscovery.org
readokaloosa.org
catalog.dmpl.org
clams.aspendiscovery.org
catalog.losgatosca.gov
pcpls.aspendiscovery.org
aabrown.aspendiscovery.org
carnegiestout.aspendiscovery.org
catalog.ncwlibraries.org
blackgold.org
acpl.us
discover.knoxcountylibrary.org
abbott.aspendiscovery.org
fayetteville.aspendiscovery.org
acpl.us
clams.aspendiscovery.org
vokal-aspen.bywatersolutions.com
clams.aspendiscovery.org
maininc.aspendiscovery.org
catalog.eulesstx.gov
metroshare.aspendiscovery.org
pioneer.aspendiscovery.org
clams.aspendiscovery.org
abbotsford.aspendiscovery.org
gmilcs.aspendiscovery.org
metroshare.aspendiscovery.org
huntsville.aspendiscovery.org
catalog.ncwlibraries.org
rclstn.aspendiscovery.org
catalog.uintahlibrary.org
blackgold.org
epcounty.aspendiscovery.org
discover.knoxcountylibrary.org

Certificate

The complete raw certificate details for clams.aspendiscovery.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ERgggHcm+Y56zJAZF8h
mfRtALWRxI4EFSiuCsTo15BjGKGeSK5FWes4o6fQ2ncZUuJv2OFWZd652ARpowR1
1WWRIxxjBgJqTg3W5gV8lCW3DQMFcnd+hkjHl5Br/hrlUaXvB+qKp05idPm3tMAh
j89TUYDpedV1Ih/6aN6cpYImzJAk+6JCwSA8D1I+v++f5cn9dq/FHE6oRbNf7rWR
gFfABpbKhA7lDnE+jVQkv93gMH4jBO0Z5+qSOCNjcuUeCeeJHJWd+MDBpQc4Fuc4
CDPDL8/mPoNjRVPj3ni79l3ZbSH+2YIb+pTOTupxmndlZw05MhCq79o5eoLtpOpQ
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282231083270226387633949857369543911106699
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 17:23:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 17:23:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clams.aspendiscovery.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26291285380314176009877967474972533585889431679090163885472912662408546156102104739170112560437875593394345682426761684852431476780666755863305606950526641409983482380344926142525418759310875193673464425291225461795555637093718358619394920736228599533603561086690310034960566475173210736016433904116181067786590921198969192186380219622716513036656893264286483954982195770389521126353910004400094660789422688314106381749868399370105151837301307839709807101327747653806310151790016243828352669433096282974717389256628651534824194492643065774930498825919054381245290602139823342513813275415607277669945903599911090933957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d6faaf526b6995962ef65133eeb7e626b7e3734
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquinnah.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquinnah.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnstable-sturgis.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnstable.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bourne.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bourne.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brewster-ladies.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brewster.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cccc-wilkens.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccccwilkens.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerville.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerville.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatham-eldredge.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chilmark.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chilmark.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clams.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotuit.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotuit.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennis-east-jacob-sears.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennis-memorial.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennis-public.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennis-south.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennis-west.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennismemorial.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennispublic.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennissouth.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denniswest.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastham.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastham.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edgartown.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edgartown.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eldredge.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falmouth-public.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falmouth-west.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falmouthpublic.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falmouthwest.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harwich-brooks.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harwichbrooks.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyannis.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyannis.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacobsears.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidsclams.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lida.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marstons-mills.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mashpee.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mashpee.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmp.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nantucket-atheneum.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nantucket.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oak-bluffs.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oakbluffs.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orleans-snow.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osterville.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osterville.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provincetown.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provincetown.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snow.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truro.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truro.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vineyard-haven.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vineyardhaven.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellfleet.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellfleet.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'west-barnstable-whelden.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'west-tisbury.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westtisbury.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whelden.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woods-hole.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodshole.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarmouth-port.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarmouth-town.clamsnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarmouthport.aspendiscovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarmouthtown.aspendiscovery.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b252149240000040300483046022100b909b24eba22165d1cf0ae7a98f839752dcb1e547a840e6ed5c47d4897bccb82022100b351cbaea2b339ea566045a334a82d0b3975e53290c8b34ce8b805af1c4776f200760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b2521495a0000040300473045022100f0a89c39ad6a422fddabe1d844a063166eded31b7c4cd64c02a56f8a4addaa6b02205c31ce8cfcfc0b828c78de92bdc0e3b70e0a7e0c4e82999e24217b7e1967d2f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002df587ebad95501807075397dd8016f82ef6b3a2494b4f4f82e7c8c295e5ad83a152ea2ead32c09607dd3a95238574d2bbd8d608a0cd0149caec1939b417521186c05b979884afcfe6f0e5cedab8695cdda096dec78658b4578e104c5e6ec66c4b0b7bb026c2fbece4c3a9fd819e36d69aac7cccaa9ffa230ff539afc5eeeb980b701dc21e84043ca26615c941881fc6633998d5d3ca1fa4f7eff7e9e345375d84500013c2143688490ce4715406437223a0a2e4a0290e47a6b76f2e5e9f1cce0e85bbaf546a31b819c80ff1b4398c71d4cf5927f3efc923481b7e06132cd19503acdad131ac7ac2b9ea836d762999366d1c90151bc94239867ef081e20367bf