usgsurveys.usg.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:b1:db:e8:68:07:1c:62:33:23:b3:55:9a:a5:6c:71:c4:8b was issued on by Let's Encrypt.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=usgsurveys.usg.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b1:db:e8:68:07:1c:62:33:23:b3:55:9a:a5:6c:71:c4:8b
Serial Number (int): 408971430325929151489566799769828582343819
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b3:e2:60:96:17:70:5a:c4:90:e3:d1:f2:c2:b4:d5:a6:68:da:10:2c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9f:b8:84:03:79:9b:bf:a5:37:08:69:9b:96:76:c9:fb:2b:1d:fb:05
Fingerprint (sha256): ab:02:ad:60:7f:43:f5:c4:d4:f6:b1:a6:4c:66:d7:4e:1c:8a:dd:16:0c:be:51:b5:e4:ce:1f:98:79:5b:bd:2c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate usgsurveys.usg.edu

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for usgsurveys.usg.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

encuestas.trazos.net
engage2.ctense.com
enquete.sonear.com
enquetes.forom.ch
evaluations.ciplastic.com
exam.think-cell.com
feedback.gutech.edu.om
feedback.ioigroup.com
form.presto.com
secure.intelli-network.com
secured.safespace.healthcare
survey.appaloosa.tech
survey.arkkangel.com
survey.autorm.co
survey.candid.solutions
survey.cleantelligent.com
survey.ekgulf.com
survey.etaxfinance.in
survey.gofarc.com
survey.gratefulestate.com
survey.greenyogaproject.org
survey.gvpta.ca
survey.hamulight.com
survey.heurohealth.com
survey.hideawayweddings.com.au
survey.icealion.co.ke
survey.inteligems.io
survey.iqoson.co.za
survey.ivyconstructions.com.au
survey.kma.consulting
survey.mh1s.com
survey.musclepotential.com
survey.odc.co.il
survey.paraminds.com
survey.pinakinit.com
survey.pluckbusinesssolutions.com
survey.replacingrisk.com
survey.researchnxt.com
survey.salesforlife.com
survey.samtech-me.com
survey.schwaben.ca
survey.smiav.tv
survey.speakerflow.com
survey.strongdallas.com
survey.syncezy.com
survey.thecarpedia.com
survey.thestepinparenting.com
survey.travelwise.com.do
survey.vueav.com
survey.zenpd.ae
surveys.atchisonhospital.org
surveys.shiftyourself.online
surveys.vaultwealthstrategies.com
usgsurveys.usg.edu

Other certificates including the domain name usg.edu

(limited to 100 certificates)
statuspage.io
apistatus.pitneybowes.com
statuspage.io
statuspage.io
statuspage.io
gil.uga.edu
spexternal.bor.usg.edu
*.proxygsu-sbul.galileo.usg.edu
epay.usg.edu
filestest.usg.edu
ap1.bor.usg.edu
statuspage.io
idp-demo-prod.bor.usg.edu
gil.uga.edu
jirafeau.galileo.usg.edu
*.hprod.onehcm.usg.edu
www.usg.edu
elver.adm.usg.edu
giluc.usg.edu
gitlab.usg.edu
*.proxygsu-dal1.galileo.usg.edu
ocs-prod-cwa.uso.bor.usg.edu
statuspage.io
statuspage.io
statuspage.io
asurams.gabest.usg.edu
statuspage.io
statuspage.io
*.onehcm.usg.edu
blog.dlg.galileo.usg.edu
oer.galileo.usg.edu
statuspage.io
*.proxygsu-psnd.galileo.usg.edu
dlg.usg.edu
*.proxygsu-gwt1.galileo.usg.edu
statuspage.io
gil.usg.edu
*.fprod.gafirst.usg.edu
statuspage.io
pauth.usg.edu
pauth.usg.edu
adfs.ssc.usg.edu
statuspage.io
statuspage.io
apistatus.pitneybowes.com
apistatus.pitneybowes.com
vpn.bor.usg.edu
statuspage.io
bi123.usg.edu
*.dev.usg.edu
*.proxygsu-seff.galileo.usg.edu
ftp.ssc.usg.edu
statuspage.io
statuspage.io
statuspage.io
*.proxygsu-sgai.galileo.usg.edu
statuspage.io
tlsv12-only.bor.usg.edu
exchcas-prod.uso.bor.usg.edu
*.aufdev2.gafirst.usg.edu
*.proxygsu-mac2.galileo.usg.edu
analytics.usg.edu
retiree-info.usg.edu
apps.usg.edu
statuspage.io
ftp.ssc.usg.edu
statuspage.io
www.bor.usg.edu
*.proxygsu-nega.galileo.usg.edu
*.view.usg.edu
apistatus.pitneybowes.com
statuspage.io
www.ssc.usg.edu
statuspage.io
app.usg.edu
ssl.ssc.usg.edu
statuspage.io
access.ssc.usg.edu
sharepoint.ssc.usg.edu
*.gafirst.usg.edu
statuspage.io
apistatus.pitneybowes.com
statuspage.io
emajor.usg.edu
statuspage.io
statuspage.io
gsw.gabest.usg.edu
*.proxygsu-sfor.galileo.usg.edu
statuspage.io
statuspage.io
statuspage.io
apistatus.pitneybowes.com
*.proxygsu-pswf.galileo.usg.edu
statuspage.io
dataviz.usg.edu
statuspage.io
ducs-con.adm.usg.edu
statuspage.io
statuspage.io
statuspage.io

Certificate

The complete raw certificate details for usgsurveys.usg.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJJTCCCA2gAwIBAgISBLHb6GgHHGIzI7NVmqVsccSLMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjAzMTAxMzQ3NDJaFw0yMjA2MDgxMzQ3NDFaMB0xGzAZBgNVBAMT
EnVzZ3N1cnZleXMudXNnLmVkdTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALz3mARmwokMopXHXAK419d7KWYdIVOSExh5I22gDvisVxcnRx9z1LEOg2dP
xCvtFMiC41ljePGUNfY3+6ky0Vl0FiOSaxyOtz+HElqMLwwVvhMRQyKe2mPs3vDA
BzZXCPK/7rwJkecJs8zhf2ImrJ56bHGURKUBy3v6X2RZn/Ds38OdHXr4bKWkP3Am
sn1kqLAlnsWGh97Cr7BmBKZ4F21S6m4x4hnKonvik17cJ64FinpgrUXA1GZkE61b
9iBzECK72623zZyZsVmN8Zfi8w3GEcNRa4HZ8bP1fgSKrzu9p0CR3eeTA+aUoCIh
M1RGSEgZ57oE5Wgfeu80j6zFbcsCAwEAAaOCBkgwggZEMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUs+JglhdwWsSQ49HywrTVpmjaECwwHwYDVR0jBBgwFoAUFC6zF7dY
VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw
Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy
Lm9yZy8wggUJBgNVHREEggUAMIIE/IIUZW5jdWVzdGFzLnRyYXpvcy5uZXSCEmVu
Z2FnZTIuY3RlbnNlLmNvbYISZW5xdWV0ZS5zb25lYXIuY29tghFlbnF1ZXRlcy5m
b3JvbS5jaIIZZXZhbHVhdGlvbnMuY2lwbGFzdGljLmNvbYITZXhhbS50aGluay1j
ZWxsLmNvbYIWZmVlZGJhY2suZ3V0ZWNoLmVkdS5vbYIVZmVlZGJhY2suaW9pZ3Jv
dXAuY29tgg9mb3JtLnByZXN0by5jb22CGnNlY3VyZS5pbnRlbGxpLW5ldHdvcmsu
Y29tghxzZWN1cmVkLnNhZmVzcGFjZS5oZWFsdGhjYXJlghVzdXJ2ZXkuYXBwYWxv
b3NhLnRlY2iCFHN1cnZleS5hcmtrYW5nZWwuY29tghBzdXJ2ZXkuYXV0b3JtLmNv
ghdzdXJ2ZXkuY2FuZGlkLnNvbHV0aW9uc4IZc3VydmV5LmNsZWFudGVsbGlnZW50
LmNvbYIRc3VydmV5LmVrZ3VsZi5jb22CFXN1cnZleS5ldGF4ZmluYW5jZS5pboIR
c3VydmV5LmdvZmFyYy5jb22CGXN1cnZleS5ncmF0ZWZ1bGVzdGF0ZS5jb22CG3N1
cnZleS5ncmVlbnlvZ2Fwcm9qZWN0Lm9yZ4IPc3VydmV5Lmd2cHRhLmNhghRzdXJ2
ZXkuaGFtdWxpZ2h0LmNvbYIWc3VydmV5LmhldXJvaGVhbHRoLmNvbYIec3VydmV5
LmhpZGVhd2F5d2VkZGluZ3MuY29tLmF1ghVzdXJ2ZXkuaWNlYWxpb24uY28ua2WC
FHN1cnZleS5pbnRlbGlnZW1zLmlvghNzdXJ2ZXkuaXFvc29uLmNvLnphgh5zdXJ2
ZXkuaXZ5Y29uc3RydWN0aW9ucy5jb20uYXWCFXN1cnZleS5rbWEuY29uc3VsdGlu
Z4IPc3VydmV5Lm1oMXMuY29tghpzdXJ2ZXkubXVzY2xlcG90ZW50aWFsLmNvbYIQ
c3VydmV5Lm9kYy5jby5pbIIUc3VydmV5LnBhcmFtaW5kcy5jb22CFHN1cnZleS5w
aW5ha2luaXQuY29tgiFzdXJ2ZXkucGx1Y2tidXNpbmVzc3NvbHV0aW9ucy5jb22C
GHN1cnZleS5yZXBsYWNpbmdyaXNrLmNvbYIWc3VydmV5LnJlc2VhcmNobnh0LmNv
bYIXc3VydmV5LnNhbGVzZm9ybGlmZS5jb22CFXN1cnZleS5zYW10ZWNoLW1lLmNv
bYISc3VydmV5LnNjaHdhYmVuLmNhgg9zdXJ2ZXkuc21pYXYudHaCFnN1cnZleS5z
cGVha2VyZmxvdy5jb22CF3N1cnZleS5zdHJvbmdkYWxsYXMuY29tghJzdXJ2ZXku
c3luY2V6eS5jb22CFnN1cnZleS50aGVjYXJwZWRpYS5jb22CHXN1cnZleS50aGVz
dGVwaW5wYXJlbnRpbmcuY29tghhzdXJ2ZXkudHJhdmVsd2lzZS5jb20uZG+CEHN1
cnZleS52dWVhdi5jb22CD3N1cnZleS56ZW5wZC5hZYIcc3VydmV5cy5hdGNoaXNv
bmhvc3BpdGFsLm9yZ4Icc3VydmV5cy5zaGlmdHlvdXJzZWxmLm9ubGluZYIhc3Vy
dmV5cy52YXVsdHdlYWx0aHN0cmF0ZWdpZXMuY29tghJ1c2dzdXJ2ZXlzLnVzZy5l
ZHUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwEwYKKwYBBAHWeQIEAwEB
/wQCBQAwDQYJKoZIhvcNAQELBQADggEBACGdy/IUP86CFPeoN14YrFHTkNGvuvCQ
9diZ+ATmjYGzeRTemHQEwdZe0GKE6Lq+EpOAOrRfZHh09wpTvay7nMeNua5QUXTK
fzCDl55eCEfmjlqzV2N0NrbgPYkZ6IqQYkU2MbMp8re5j1wOlt0OrJlhhzRFRpMk
9h5wx7dS8MjLZbxwqkAHPmezf+0iNOH2k8S2zgShKKy/cXYHHqkrCf6bXc+GEuhZ
eal/KAigHo6GF/yxOt22673OjnIiXQbkLJL0d1JfjP7AX63aA+xjpKxHGZzfhiKC
yCRoc92W7qANY6ZV9mDOKr3oIo2SxCpdwnmRYuMT58e13AWQISQFW78=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPeYBGbCiQyilcdcArjX
13spZh0hU5ITGHkjbaAO+KxXFydHH3PUsQ6DZ0/EK+0UyILjWWN48ZQ19jf7qTLR
WXQWI5JrHI63P4cSWowvDBW+ExFDIp7aY+ze8MAHNlcI8r/uvAmR5wmzzOF/Yias
nnpscZREpQHLe/pfZFmf8Ozfw50devhspaQ/cCayfWSosCWexYaH3sKvsGYEpngX
bVLqbjHiGcqie+KTXtwnrgWKemCtRcDUZmQTrVv2IHMQIrvbrbfNnJmxWY3xl+Lz
DcYRw1Frgdnxs/V+BIqvO72nQJHd55MD5pSgIiEzVEZISBnnugTlaB967zSPrMVt
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408971430325929151489566799769828582343819
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-10 13:47:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-08 13:47:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'usgsurveys.usg.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23854894395331404845025285259721196396825312259204198876094907939091685982978590311539771728516412092373406780070702964331069804414741261614620109195459437122915246788071770287332989113984616204153659741993459148586160745100303223510361955508682808676533599664800996778674492162948562436568365085783225075289852367441723324003206423992477798430050060651140781581419254362478769687734985523393097627875041211736464402875816817129987000353943356575922244135549887555689873698311675804949281442316821631009696824320306644390374196456510057128871130380205090476988641301734617529047210614735020422765015482963898405318091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3e2609617705ac490e3d1f2c2b4d5a668da102c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1280 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encuestas.trazos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage2.ctense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enquete.sonear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enquetes.forom.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evaluations.ciplastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exam.think-cell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback.gutech.edu.om'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback.ioigroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'form.presto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.intelli-network.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secured.safespace.healthcare'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.appaloosa.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.arkkangel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.autorm.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.candid.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.cleantelligent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.ekgulf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.etaxfinance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.gofarc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.gratefulestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.greenyogaproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.gvpta.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.hamulight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.heurohealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.hideawayweddings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.icealion.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.inteligems.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.iqoson.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.ivyconstructions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.kma.consulting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.mh1s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.musclepotential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.odc.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.paraminds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.pinakinit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.pluckbusinesssolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.replacingrisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.researchnxt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.salesforlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.samtech-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.schwaben.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.smiav.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.speakerflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.strongdallas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.syncezy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.thecarpedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.thestepinparenting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.travelwise.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.vueav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.zenpd.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveys.atchisonhospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveys.shiftyourself.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveys.vaultwealthstrategies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usgsurveys.usg.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00219dcbf2143fce8214f7a8375e18ac51d390d1afbaf090f5d899f804e68d81b37914de987404c1d65ed06284e8babe1293803ab45f647874f70a53bdacbb9cc78db9ae505174ca7f3083979e5e0847e68e5ab357637436b6e03d8919e88a9062453631b329f2b7b98f5c0e96dd0eac9961873445469324f61e70c7b752f0c8cb65bc70aa40073e67b37fed2234e1f693c4b6ce04a128acbf7176071ea92b09fe9b5dcf8612e85979a97f2808a01e8e8617fcb13addb6ebbdce8e72225d06e42c92f477525f8cfec05fadda03ec63a4ac47199cdf862282c8246873dd96eea00d63a655f660ce2abde8228d92c42a5dc2799162e313e7c7b5dc05902124055bbf