infonet.fia.org

Issued by R3

About this certificate

This digital certificate with serial number 03:50:77:d5:f0:5d:76:40:53:6d:59:33:94:78:72:08:b4:75 was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=infonet.fia.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:50:77:d5:f0:5d:76:40:53:6d:59:33:94:78:72:08:b4:75
Serial Number (int): 288718736114868210910714497162500641436789
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:9b:17:69:c9:b4:ba:10:23:40:23:3a:6b:36:85:02:6c:d3:c1:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 53:0b:63:16:d7:82:91:33:f5:67:75:71:8c:96:5d:ee:53:f5:2b:b9
Fingerprint (sha256): aa:14:61:2b:d1:ef:58:8b:d1:6f:22:4c:fa:71:cb:8c:8c:05:78:8c:a8:a4:dc:16:6f:41:ee:14:ca:cd:42:ee

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate infonet.fia.org

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for infonet.fia.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

infonet.fia.org
inks.govdelivery.com
inside.gc.cuny.edu
inside.kjzz.org
internal.gcir.org
international.research.ucsb.edu
internetcouncil.nacha.org
intranet.olivecrest.org
ip.earthjustice.org
ip.govdelivery.com
ipv6.earthjustice.org
ipv6.govdelivery.com
it-chat.web.arizona.edu
it.22squared.com
it.uahs.arizona.edu
itcatalyst.sfsu.edu
iteachu.multidevcom.uaf.edu
japan.fia.org
jlinks.govdelivery.com
jml1.earthjustice.org
job.earthjustice.org
jobs.earthjustice.org
journaldev.naeyc.org
jp.mcny.org
jss-dc3.govdelivery.com
junk.dana.org
junk2.dana.org
jwplayer.essence.com
k8s.earthjustice.org
kamunanya.gaje.ethics3.pantheon.berkeley.edu
keajaiban.multidevcom.uaf.edu
kgqm.kjzz.org
kim.lovelace.shiatsusociety.org
kissingbug.arizona.edu
krypton.summer.harvard.edu
kubernetes.govdelivery.com
labellelab.asu.edu
laborlabsandbox.aflcio.org
lambda.usc.edu
landing.pacific.edu
lasota.multidevcom.uaf.edu
law.ss.pacific.edu
ldap.cscc.unc.edu
legacy.bricartsmedia.org
legacy.hq.philabundance.org
liberalarts.ss.pacific.edu
libre.estadio.com
lindsay.mcny.org
live-embed-atu.edu.help
live-sas-strategic-plan.pantheon.sas.upenn.edu
live.aep.cornell.edu
live.bme.cornell.edu
live.cam.cornell.edu
live.mcgeorge.edu
live.ophd.pantheon.berkeley.edu
live.ucdavis.edu
lp.grad.online.udel.edu.help
lp.programs.carey.jhu.edu.help
m.ajc.org
m.gonctd.com
m.religionnews.com
m.voiceofsandiego.org
mail2.concernusa.org
mailams.ustelecom.org
make.engineering.asu.edu
makinghistory.gwu.edu
management.arizona.edu
marketing.magicsoftware.com
marketingprojects.maryville.edu
mediaroom.livestrong.org
memberauth.audiology.org
microsites.globalwaters.org
mobile-data.skyandtelescope.com
mobile.ajc.org
msa2016.berkeley.edu
mtageniustransitchallenge.ny.gov
mypnw.pnw.edu
nacopn3.naco.org
nanophotonics.asu.edu
nartc.fcm.arizona.edu
nartechedge.nar.realtor
news.catholicschoolsbq.org
news.religionnews.com
newsite.as-coa.org
newsite.dev.cms1.asa.uw.edu
next.warnerpacific.edu
noticias.lared.cl
nrrss.ced.berkeley.edu
nsmg.newstatesman.com
null.actorsfund.org
nyild.unionderm.com
ocpl.arizona.edu
odl.rutgers.edu

Other certificates including the domain name fia.org

(limited to 100 certificates)
it.uahs.arizona.edu
*.fia.org
fia.org
*.fia.org
hub.meed.com
good.gsm.cornell.edu
webmail.fia.org
club.kjzz.org
secure.fia.org
host2.openminds.com
local3599.com
dmist-standards.org
secure.fia.org
2fadmin.govdelivery.com
fia.org
agd.nebrwesleyan.edu
inside.gc.cuny.edu
fia.org
secure.fia.org
2fadmin.govdelivery.com
secure.fia.org
international.dev.oceana.org
dg-0035-c25fe2a.client-tls.adestra.com
sters.us
cloudapp-eu.appcelerator.com
fia.org
secure.fia.org
intranet.olivecrest.org
dmist-standards.org
cms.legacy.com
fia.org
fia.org
d7.cmc.edu
agenslotgacor.gsm.cornell.edu
info-dev.calperformances.org
internal.gcir.org
5732322821275648-fe4.pantheonsite.io
webmail.fia.org
dmist-standards.org
d7.cmc.edu
cetys.udesa.edu.ar
online.fia.org
international.research.ucsb.edu
cetys.udesa.edu.ar
dmist-standards.org
csc.arizona.edu
csc.arizona.edu
international.research.ucsb.edu
agd.nebrwesleyan.edu
dmist-standards.org
secure.fia.org
csc.arizona.edu
international.dev.oceana.org
webmail.fia.org
fia.org
international.dev.oceana.org
coins.rutgers.edu
ipv6.earthjustice.org
design-engineering.princeton.edu
cetys.udesa.edu.ar
gws-uat.earthjustice.org
access.fia.org
2fadmin.govdelivery.com
agd.nebrwesleyan.edu
host2.cenmi.org
fia.org
fia.org
connect.iadb.org
d7store.juilliard.edu
international.dev.oceana.org
info.vcfa.edu
5732322821275648-fe4.pantheonsite.io
2fadmin.govdelivery.com
5643172898144256-fe4.pantheonsite.io
cmmb-portal.cmmb.org
info-dev.calperformances.org
internetcouncil.nacha.org
international.dev.oceana.org
access.fia.org
connect.iadb.org
fia.org
international.dev.oceana.org
covid.usmle.org
csc.arizona.edu
fia.org
infonet.fia.org
cloudapp.appcelerator.com
webhost1.fia.org
*.fia.org
covid.usmle.org
autodiscover.fia.org
fia.org
5732322821275648-fe4.pantheonsite.io
httpbin.earthjustice.org
internal.gcir.org
dg-0035-c25fe2a.client-tls.adestra.com
fia.org
csc.arizona.edu
agenslotgacor.gsm.cornell.edu
fia.org

Certificate

The complete raw certificate details for infonet.fia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMpTCCC42gAwIBAgISA1B31fBddkBTbVkzlHhyCLR1MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjExMjYxMjM0MjBaFw0yMzAyMjQxMjM0MTlaMBoxGDAWBgNVBAMT
D2luZm9uZXQuZmlhLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANZKyxomORzTPc9TPQeltlDYS3dlmXBOwG/CzHq62y+TmwCy59Di6eBCG1vMC8HH
b3f8VzJi0Zw+bR31yMeGxJMUTxCavwflJs9c49ZObtihSmUhhsTqNe8EZ8kiaAYB
cNdi6lFCFuVphH5osQhb+FgzeGjPlFYsGAahsNm0utN87ZtP7VljmsMcr6rbsj2L
67DAdGMk5mowr7N9SgeY+7BvUNbiobect8R12vwVghZWO//a7r1pahXIQw1Y5e/w
Sw1hHhwUY9zykrcls/MTzA2Mn3HsxSfkWZDd6HNsyboOQfy3rZI23IPeLhBmysl7
oPcvw6IFVvAIpLHzH2oGwMUCAwEAAaOCCcswggnHMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUPJsXacm0uhAjQCM6azaFAmzTwdUwHwYDVR0jBBgwFoAUFC6zF7dYVsuu
UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v
cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y
Zy8wggiMBgNVHREEggiDMIIIf4IPaW5mb25ldC5maWEub3JnghRpbmtzLmdvdmRl
bGl2ZXJ5LmNvbYISaW5zaWRlLmdjLmN1bnkuZWR1gg9pbnNpZGUua2p6ei5vcmeC
EWludGVybmFsLmdjaXIub3Jngh9pbnRlcm5hdGlvbmFsLnJlc2VhcmNoLnVjc2Iu
ZWR1ghlpbnRlcm5ldGNvdW5jaWwubmFjaGEub3JnghdpbnRyYW5ldC5vbGl2ZWNy
ZXN0Lm9yZ4ITaXAuZWFydGhqdXN0aWNlLm9yZ4ISaXAuZ292ZGVsaXZlcnkuY29t
ghVpcHY2LmVhcnRoanVzdGljZS5vcmeCFGlwdjYuZ292ZGVsaXZlcnkuY29tghdp
dC1jaGF0LndlYi5hcml6b25hLmVkdYIQaXQuMjJzcXVhcmVkLmNvbYITaXQudWFo
cy5hcml6b25hLmVkdYITaXRjYXRhbHlzdC5zZnN1LmVkdYIbaXRlYWNodS5tdWx0
aWRldmNvbS51YWYuZWR1gg1qYXBhbi5maWEub3JnghZqbGlua3MuZ292ZGVsaXZl
cnkuY29tghVqbWwxLmVhcnRoanVzdGljZS5vcmeCFGpvYi5lYXJ0aGp1c3RpY2Uu
b3JnghVqb2JzLmVhcnRoanVzdGljZS5vcmeCFGpvdXJuYWxkZXYubmFleWMub3Jn
ggtqcC5tY255Lm9yZ4IXanNzLWRjMy5nb3ZkZWxpdmVyeS5jb22CDWp1bmsuZGFu
YS5vcmeCDmp1bmsyLmRhbmEub3JnghRqd3BsYXllci5lc3NlbmNlLmNvbYIUazhz
LmVhcnRoanVzdGljZS5vcmeCLGthbXVuYW55YS5nYWplLmV0aGljczMucGFudGhl
b24uYmVya2VsZXkuZWR1gh1rZWFqYWliYW4ubXVsdGlkZXZjb20udWFmLmVkdYIN
a2dxbS5ranp6Lm9yZ4Ifa2ltLmxvdmVsYWNlLnNoaWF0c3Vzb2NpZXR5Lm9yZ4IW
a2lzc2luZ2J1Zy5hcml6b25hLmVkdYIaa3J5cHRvbi5zdW1tZXIuaGFydmFyZC5l
ZHWCGmt1YmVybmV0ZXMuZ292ZGVsaXZlcnkuY29tghJsYWJlbGxlbGFiLmFzdS5l
ZHWCGmxhYm9ybGFic2FuZGJveC5hZmxjaW8ub3Jngg5sYW1iZGEudXNjLmVkdYIT
bGFuZGluZy5wYWNpZmljLmVkdYIabGFzb3RhLm11bHRpZGV2Y29tLnVhZi5lZHWC
Emxhdy5zcy5wYWNpZmljLmVkdYIRbGRhcC5jc2NjLnVuYy5lZHWCGGxlZ2FjeS5i
cmljYXJ0c21lZGlhLm9yZ4IbbGVnYWN5LmhxLnBoaWxhYnVuZGFuY2Uub3Jnghps
aWJlcmFsYXJ0cy5zcy5wYWNpZmljLmVkdYIRbGlicmUuZXN0YWRpby5jb22CEGxp
bmRzYXkubWNueS5vcmeCF2xpdmUtZW1iZWQtYXR1LmVkdS5oZWxwgi5saXZlLXNh
cy1zdHJhdGVnaWMtcGxhbi5wYW50aGVvbi5zYXMudXBlbm4uZWR1ghRsaXZlLmFl
cC5jb3JuZWxsLmVkdYIUbGl2ZS5ibWUuY29ybmVsbC5lZHWCFGxpdmUuY2FtLmNv
cm5lbGwuZWR1ghFsaXZlLm1jZ2VvcmdlLmVkdYIfbGl2ZS5vcGhkLnBhbnRoZW9u
LmJlcmtlbGV5LmVkdYIQbGl2ZS51Y2RhdmlzLmVkdYIcbHAuZ3JhZC5vbmxpbmUu
dWRlbC5lZHUuaGVscIIebHAucHJvZ3JhbXMuY2FyZXkuamh1LmVkdS5oZWxwgglt
LmFqYy5vcmeCDG0uZ29uY3RkLmNvbYISbS5yZWxpZ2lvbm5ld3MuY29tghVtLnZv
aWNlb2ZzYW5kaWVnby5vcmeCFG1haWwyLmNvbmNlcm51c2Eub3JnghVtYWlsYW1z
LnVzdGVsZWNvbS5vcmeCGG1ha2UuZW5naW5lZXJpbmcuYXN1LmVkdYIVbWFraW5n
aGlzdG9yeS5nd3UuZWR1ghZtYW5hZ2VtZW50LmFyaXpvbmEuZWR1ghttYXJrZXRp
bmcubWFnaWNzb2Z0d2FyZS5jb22CH21hcmtldGluZ3Byb2plY3RzLm1hcnl2aWxs
ZS5lZHWCGG1lZGlhcm9vbS5saXZlc3Ryb25nLm9yZ4IYbWVtYmVyYXV0aC5hdWRp
b2xvZ3kub3JnghttaWNyb3NpdGVzLmdsb2JhbHdhdGVycy5vcmeCH21vYmlsZS1k
YXRhLnNreWFuZHRlbGVzY29wZS5jb22CDm1vYmlsZS5hamMub3JnghRtc2EyMDE2
LmJlcmtlbGV5LmVkdYIgbXRhZ2VuaXVzdHJhbnNpdGNoYWxsZW5nZS5ueS5nb3aC
DW15cG53LnBudy5lZHWCEG5hY29wbjMubmFjby5vcmeCFW5hbm9waG90b25pY3Mu
YXN1LmVkdYIVbmFydGMuZmNtLmFyaXpvbmEuZWR1ghduYXJ0ZWNoZWRnZS5uYXIu
cmVhbHRvcoIabmV3cy5jYXRob2xpY3NjaG9vbHNicS5vcmeCFW5ld3MucmVsaWdp
b25uZXdzLmNvbYISbmV3c2l0ZS5hcy1jb2Eub3JnghtuZXdzaXRlLmRldi5jbXMx
LmFzYS51dy5lZHWCFm5leHQud2FybmVycGFjaWZpYy5lZHWCEW5vdGljaWFzLmxh
cmVkLmNsghZucnJzcy5jZWQuYmVya2VsZXkuZWR1ghVuc21nLm5ld3N0YXRlc21h
bi5jb22CE251bGwuYWN0b3JzZnVuZC5vcmeCE255aWxkLnVuaW9uZGVybS5jb22C
EG9jcGwuYXJpem9uYS5lZHWCD29kbC5ydXRnZXJzLmVkdTBMBgNVHSAERTBDMAgG
BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz
LmxldHNlbmNyeXB0Lm9yZzATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B
AQsFAAOCAQEAIxVXqX6XiZd8JihL5w7eJ4Z1rcuvmJSKmo0GwMOVEkB7RtL4zEoq
R4gUsK0C4Df8qP31xd/osQLlewMDWjc3uydjqS1J7ByLQZsPB/Wxtq1dRJw53al3
Ozs2+Zqyp/rV7LXtI91GKOuKgOhof+xrajys9ZY8QsLGqnpTkuP1TFoxJtmEgXgB
EkFzvQx1jKCmveuzzsQ612uGWlqEfgaObACxS6y99yEEqO4layesnnZGscOkl6dn
lGXECryWLLDLCHR9Dl87C5h8V4xO0SBRIkA9R2pbWQhQf+211R5kU9JiufMesave
ftTMQuu6Da0BgQ+cylusm01flESpgdUQlA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krLGiY5HNM9z1M9B6W2
UNhLd2WZcE7Ab8LMerrbL5ObALLn0OLp4EIbW8wLwcdvd/xXMmLRnD5tHfXIx4bE
kxRPEJq/B+Umz1zj1k5u2KFKZSGGxOo17wRnySJoBgFw12LqUUIW5WmEfmixCFv4
WDN4aM+UViwYBqGw2bS603ztm0/tWWOawxyvqtuyPYvrsMB0YyTmajCvs31KB5j7
sG9Q1uKht5y3xHXa/BWCFlY7/9ruvWlqFchDDVjl7/BLDWEeHBRj3PKStyWz8xPM
DYyfcezFJ+RZkN3oc2zJug5B/Letkjbcg94uEGbKyXug9y/DogVW8AiksfMfagbA
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288718736114868210910714497162500641436789
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-26 12:34:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 12:34:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'infonet.fia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27051879246987795918157081769347786029824013987700245685560176012398829669503593988997576235999467454977596675908360519638508980077350079336112409203867887727642438593859768977446738982811852850099879588124549084837490706516863948085138562804710317219100975431354198450260867336150813707970202119549657800635690121467230306050136335514175761311036955160170311563565205511445699445407394949305874757645720485424970784043326347561440200864835028841555106339193173754098299937616706943111062387923638637767080897885730749002880630516324177652134287523824852860717849020271190392257327165031828926344633865049263745450181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c9b1769c9b4ba102340233a6b3685026cd3c1d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2179 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infonet.fia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inks.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.gc.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.kjzz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.gcir.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international.research.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetcouncil.nacha.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.olivecrest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ip.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ip.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv6.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv6.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-chat.web.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.22squared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itcatalyst.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iteachu.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japan.fia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlinks.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jml1.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'job.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journaldev.naeyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jss-dc3.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junk.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junk2.dana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwplayer.essence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k8s.earthjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamunanya.gaje.ethics3.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keajaiban.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kgqm.kjzz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kim.lovelace.shiatsusociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kissingbug.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krypton.summer.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubernetes.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labellelab.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laborlabsandbox.aflcio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambda.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasota.multidevcom.uaf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldap.cscc.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.bricartsmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.hq.philabundance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberalarts.ss.pacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libre.estadio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindsay.mcny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-embed-atu.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-sas-strategic-plan.pantheon.sas.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.aep.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.bme.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.cam.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.mcgeorge.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ophd.pantheon.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ucdavis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.grad.online.udel.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.programs.carey.jhu.edu.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ajc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.gonctd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.voiceofsandiego.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail2.concernusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailams.ustelecom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'make.engineering.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makinghistory.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'management.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.magicsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingprojects.maryville.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaroom.livestrong.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memberauth.audiology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsites.globalwaters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-data.skyandtelescope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.ajc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msa2016.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtageniustransitchallenge.ny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypnw.pnw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nacopn3.naco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanophotonics.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartc.fcm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nartechedge.nar.realtor'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.catholicschoolsbq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.religionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsite.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsite.dev.cms1.asa.uw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.warnerpacific.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noticias.lared.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrrss.ced.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsmg.newstatesman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'null.actorsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyild.unionderm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocpl.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odl.rutgers.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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