advanceiowa.com

- University of Northern Iowa -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0c:b1:d6:00:0c:e2:3f:b0:ad:0c:9d:ce:8e:57:ba:94 was issued on by DigiCert Inc.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Northern Iowa

Organization: University of Northern Iowa
State / Province: Iowa
Locality: Cedar Falls
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:b1:d6:00:0c:e2:3f:b0:ad:0c:9d:ce:8e:57:ba:94
Serial Number (int): 16874112933022174543840247042880813716
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f1:56:13:74:fa:70:2a:ba:0c:1a:bc:1e:30:c5:a8:7d:73:d4:f8:aa
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 84:e2:ac:0b:1f:43:27:61:a2:62:13:35:d8:54:90:ae:92:f4:bd:cf
Fingerprint (sha256): b3:87:7b:a5:2b:c3:36:dd:28:39:e6:4c:b4:fa:2e:df:29:be:b9:8e:4e:93:b5:cd:28:b4:ad:7a:1e:b0:29:f6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate advanceiowa.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for advanceiowa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advanceiowa.com
unidome.org
uni-dome.org
uni-dome.com
farmingforpublichealth.org
agricultureforpublichealth.org
unialum.org
uni-foundation.org
northamericanreview.org
www.advanceiowa.com
www.unialum.org
www.uni-foundation.org
www.northamericanreview.org
neiowastem.org
www.neiowastem.org
neiowastem.com
www.neiowastem.com
neiowastem.net
www.neiowastem.net
tallgrassprairiecenter.org
www.tallgrassprairiecenter.org
narobotics.org
www.narobotics.org
goodneighboriowa.org
www.goodneighboriowa.org
wayup-iowa.org
www.wayup-iowa.org
qualityeducationswia.org
www.qualityeducationswia.org
qualityeducationnwia.org
www.qualityeducationnwia.org
nwirrc.org
www.nwirrc.org
unibusinessethics.com
iowastem.gov
www.iowastem.gov
iowateacherintern.org
www.iowateacherintern.org
proudandtorn.com
www.proudandtorn.com
mba.uni.edu.hk
www.mba.uni.edu.hk
exploreiowageology.org
www.exploreiowageology.org
tedxuni.com
www.tedxuni.com
star4d.org
www.star4d.org
unibookstore.com
www.unibookstore.com
iwrc.org
www.iwrc.org
painttraining.com
www.painttraining.com
intranet.iwrc.org
mwfoodsummit.com
www.mwfoodsummit.com
rrttc.com
www.rrttc.com
proudandtorn.org
www.proudandtorn.org
uni.edu
teachingiowahistory.com
www.teachingiowahistory.com
community-in-motion.com
www.community-in-motion.com
rampsandpathways.org
www.rampsandpathways.org
jpec.org
www.jpec.org
iowastem.org
www.iowastem.org
msei.iwrc.org
unifoundation.org
www.unifoundation.org
19th-amendment-centennial.org

Other certificates including the domain name advanceiowa.com

(limited to 100 certificates)
advanceiowa.com
advanceiowa.com
advanceiowa.com
uni.edu
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
uni.edu
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
uni.edu
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
uni.edu
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com
advanceiowa.com

Certificate

The complete raw certificate details for advanceiowa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uBAEnxerCIjAvJ66ciF
E6HzxPR22KKThdCZ/JJAl9SzUScNa2zpaJ0rUDUk2dlfQXByjlhLtvd2p4lrWtfP
D7/V4jTKZNnyXS9khY62KlM0VUwK1q8R9md4MdLVZAAoI3Wabmr1q62YN43FLzDu
CuOuloNxoavdbavlQ55t5vMoVK+d3RuiPAFUFNCxFrrfIEo2NaKQ8xdfU3J5QzJF
EfbW+Klygm9yGRk/X1D44Kvb+a4zR+xAAv/hhowyViz5wX2sSUTsqlPoy9mk+NdL
V4+L3FmZMWfjgsJ2szhBH1+MK4Z8OHW6ptGMSjqemLZ17ZqAMBX+Zn86GQGj/Zor
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16874112933022174543840247042880813716
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Iowa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cedar Falls'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Northern Iowa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'advanceiowa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28135485637999512404034980260901089774867501856961740402497261983397072265261321992721467548245810791510770187878159507578161860435015485955012933007930800541246037841549243867758996506559313344805074011064894326053072708936999611527896711944866330144163835440701316634509289427699488442041654977553694552162220013293177541751517522156953564142883832279669602168823626637169400888104541026490470380750990733661838518180154914712466345530634111787217220886412415814688258004263411639509407189754927204939082589931137048019364618223697938377679594502332908186764420218994805273351844997185432877077337962089503593736967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1561374fa702aba0c1abc1e30c5a87d73d4f8aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1530 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanceiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unidome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-dome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-dome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmingforpublichealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agricultureforpublichealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unialum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni-foundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northamericanreview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advanceiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unialum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uni-foundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northamericanreview.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neiowastem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neiowastem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neiowastem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neiowastem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neiowastem.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neiowastem.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tallgrassprairiecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tallgrassprairiecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narobotics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.narobotics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodneighboriowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodneighboriowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayup-iowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wayup-iowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualityeducationswia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualityeducationswia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualityeducationnwia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualityeducationnwia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwirrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nwirrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unibusinessethics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowastem.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowastem.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowateacherintern.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowateacherintern.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proudandtorn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.proudandtorn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mba.uni.edu.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mba.uni.edu.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploreiowageology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exploreiowageology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedxuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tedxuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'star4d.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.star4d.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unibookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unibookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'painttraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.painttraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.iwrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mwfoodsummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mwfoodsummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrttc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rrttc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proudandtorn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.proudandtorn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uni.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teachingiowahistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teachingiowahistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community-in-motion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community-in-motion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rampsandpathways.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rampsandpathways.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jpec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowastem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowastem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msei.iwrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unifoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unifoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '19th-amendment-centennial.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016b9fb983d50000040300463044022002845edfd4b7e2f4b558ce3a2d793dc6b178b39087ec9081c0b9e590a2f840d5022058385b593e5bc75c6bb9cf6dc6dcda8b782083f5a2d227862d8d8c3d2d1c16530075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016b9fb98424000004030046304402206c4ec70abf3a163ed9fa8a55014362f05b3db1f1a428e51d035e43df7e4f25da02203f42dfc6d1f670aaa706a9fa9655b6bedde1f63a1f68c029aa3c6ca8c3fb8727
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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