cli-wpms.org

- The University of Texas Health Science Center at Houston -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number a4:05:3d:c3:ea:2c:fd:87:d4:df:3f:98:c3:8b:8b:ff was issued on by Internet2.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The University of Texas Health Science Center at Houston

Organization: The University of Texas Health Science Center at Houston
Organization unit: U.T. Health (Houston) [root]
Address: 7000 Fannin, Suite 1200
Postal code: 77030
State / Province: TX
Locality: Houston
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a4:05:3d:c3:ea:2c:fd:87:d4:df:3f:98:c3:8b:8b:ff
Serial Number (int): 218020605541970272626436156408531225599
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 84:97:a4:93:e9:ce:28:10:0f:68:95:d3:da:d9:13:78:05:8c:ee:e2
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 8e:09:0b:10:ca:be:d6:6a:ca:1a:73:f7:f7:ed:d7:31:68:11:98:5d
Fingerprint (sha256): b5:80:7a:46:63:1d:45:f6:5f:a9:dc:04:5d:8b:c1:56:8e:0b:2d:0c:03:dc:e3:07:5b:ca:2c:e3:b7:b4:25:3f

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate cli-wpms.org

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cli-wpms.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cli-wpms.org
cliengagefamily.org
clisolutionsgroup.org
developingtalkers.org
playandlearning.org
readingrulesworks.org
scecd.org
tsrsummerinstitute.org
www.cli-wpms.org
www.cliengagefamily.org
www.clisolutionsgroup.org
www.developingtalkers.org
www.playandlearning.org
www.readingrulesworks.org
www.scecd.org
www.tsrsummerinstitute.org

Other certificates including the domain name cli-wpms.org

(limited to 100 certificates)
cli-wpms.org
cli-wpms.org
cli-wpms.org
cli-wpms.org
cli-wpms.org
cli-wpms.org
cli-wpms.org

Certificate

The complete raw certificate details for cli-wpms.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApGNuHb10/mk7Ukv+dZzn
1LEy3D8EoQ/P4ubOg1tfAJD6+ixU0fm9VzK09zObSLT66PllY/CkU5rDpqRv5zTI
XdUgvpL+OB0eLYbLmcSGgqSEYRB7M8RMQp0bu6qrewVmxlj3hRQTdsxPv22i53pM
w4iWfY5dpUr2DYv/jIfV8MgFSHHa+GG8ahDy2wTx+FmP7mWC/mMYAtkAb7MEprIP
VbJE4VvjQSbGM1haJwROnmIpQjcPho22bdF5mcCxU1jfj9n0wVbP56lNdOvtWP8y
jQO0waTrTAc9Gzi9bnoloTBl7R4lzZ4RrQ+xV9qjSDvpq1Ghw/Mb+kP2EausBuHQ
umcQ5voqP4mqNRLmZl9oyhjvVcv/64DbU/PHxreg/7biIIoVq1NyNHPnLtiVcDuc
J4eGiadxu1WYzQf/lD16ngZvhL+Vo2V0uA22vaHxpjPsI/XUD1qyX7rmnUrcUDQE
aOy88NhfvA38JcVxLkNGGrzrEXZtzfFfkI5hRN5hxNtY/xwU5cYYjnQLGM42efpl
7cvNYKXuIu2iSDEs44z/I3lx3iX2f7AmHxHcIDjJcd57KYQnW+JbJb8tlD2t1a3e
Soa5mYh3l8cSh9uEMN+mhTN/YveIpu/B+PaAO6j67N9RgqTjx6LUBQl16elOLPm+
h8kU1yR53WT+Y6BbNJ8cHXcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 218020605541970272626436156408531225599
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '77030'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '7000 Fannin, Suite 1200'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The University of Texas Health Science Center at Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'U.T. Health (Houston)  [root]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cli-wpms.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 670646156788606850600130837134068156909443307701630951434317919714799718322146303820824846621694794090404965819731500536836071753623100077902778197565496943353901419013171436653722103112503949530379708681293060487678188527609528419345031257252832973060822176069349185147946767326353324829968852141241061708373006181271526449586421659169475540963381473230593288520055137002718113098462922248964644963853915344995300377590649175364810363034520781761805479458250877815562248760258341955924451054041114510557821210870576860363787715128494354048955744800450272266150091274081491691226264839705445089479119068910608087556571820566441599152330717184906634644538961357551242749152691233369898411848300433255736427507019129035796775781522365380757995345282531935722435740508564648420401056640353875034598668094673810963418463854473476495849548664019931092092236132168231548493981558926455782472049357716884929646947443059215296945609781628012847986600840650636799339379804115206392848820069421089014167073639955549535324993185884709476646698908666194025365462375926219193750150857825353350043945157412648000995543070689292623645352025379802437703039620194666731698580812275593024716586850626865424258458834170816102896860881486375366948560247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8497a493e9ce28100f6895d3dad91378058ceee2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (356 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cli-wpms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliengagefamily.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clisolutionsgroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developingtalkers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playandlearning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readingrulesworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scecd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsrsummerinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cli-wpms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliengagefamily.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clisolutionsgroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developingtalkers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playandlearning.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readingrulesworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scecd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tsrsummerinstitute.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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