5686589850124288-fe4.pantheonsite.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1e:24:c8:7e:d5:33:07:e1:30:c8:af:83:f1:d0:e4:8a:bd was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=5686589850124288-fe4.pantheonsite.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1e:24:c8:7e:d5:33:07:e1:30:c8:af:83:f1:d0:e4:8a:bd
Serial Number (int): 271594222042603859717785946392886035909309
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:94:73:60:6e:38:83:d3:b7:ab:c0:e8:ee:20:18:12:3c:90:82:1e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 79:74:58:35:38:17:14:45:a1:2a:e0:f8:14:7f:0e:d0:83:42:31:8d
Fingerprint (sha256): c1:2b:53:69:1f:28:fe:eb:64:85:01:ed:93:90:3d:01:c9:a5:20:c1:b8:b1:44:37:ef:bc:1a:12:0c:ab:a3:99

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 5686589850124288-fe4.pantheonsite.io

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 5686589850124288-fe4.pantheonsite.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

25live.humboldt.edu
5686589850124288-fe4.pantheonsite.io
abingdonairandcountry.co.uk
adminaffairs.humboldt.edu
assistivetechcenter.org
assistivetechnologycenter.com
assistivetechnologycenter.org
beanproject.eu
boost.reachlocal.com
budget.humboldt.edu
businessservices.humboldt.edu
cityclimateplanner.org
cityguides.wellandgood.com
cls.sfsu.edu
cuky.us
des.wa.gov
dev.beanproject.eu
drupal.sfsu.edu
dsstpublicschools.org
earlyoutreachprograms.humboldt.edu
emph.ucla.edu
eos-staging.sfsu.edu
exechpm.ucla.edu
facilitymgmt.humboldt.edu
financialreporting.humboldt.edu
financialservices.humboldt.edu
gameday.texasexes.org
german-staging.sfsu.edu
gis.sfsu.edu
giving.test.worldvision.org.sg
healthedge.com
itpolicy.sfsu.edu
itsecurity.sfsu.edu
johnreps.library.cornell.edu
julieyee.com
lending.accessgroup.org
mllab.sfsu.edu
nathanroth.ca
nunn-better.com
ofm.wa.gov
one.ofm.wa.gov
onenet.wa.gov
parking.humboldt.edu
payroll.humboldt.edu
philadelphiaanimalhospital.com
phillyanimalhospital.com
policiesandpracticedirectives.sfsu.edu
practiceops.weill.cornell.edu
practiceops.weillcornell.org
procurement.humboldt.edu
rehabmed.weill.cornell.edu
researchgo.ucla.edu
risksafety.humboldt.edu
siec.wa.gov
snapshot.reachlocal.com
studentfees.humboldt.edu
studentfinancialservices.humboldt.edu
stvm.com
sxs.sfsu.edu
test.beanproject.eu
tjhsst.fcps.edu
weillcornellrehab.org
werbarealty.com
westfieldhs.fcps.edu
workingsmarter.universityofcalifornia.edu
www.assistivetechcenter.org
www.assistivetechnologycenter.com
www.assistivetechnologycenter.org
www.beanproject.eu
www.boost.reachlocal.com
www.centennial.chinamedicalboard.org
www.cityguides.wellandgood.com
www.cuky.us
www.des.wa.gov
www.dsstpublicschools.org
www.exechpm.ucla.edu
www.mainstreetnd.com
www.nathanroth.ca
www.nunn-better.com
www.onenet.wa.gov
www.philadelphiaanimalhospital.com
www.phillyanimalhospital.com
www.researchgo.ucla.edu
www.siec.wa.gov
www.studio1062.com
www.stvm.com
www.weillcornellrehab.org
www.werbarealty.com
wytec.biz

Other certificates including the domain name 5686589850124288-fe4.pantheonsite.io

(limited to 100 certificates)
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io
5686589850124288-fe4.pantheonsite.io

Certificate

The complete raw certificate details for 5686589850124288-fe4.pantheonsite.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA272cFNQ+5Sp7MSuDY2Th
XsDIwYqsVxNCkpa1vPkwsqD21+Se4M2PM8te7pxlH1OWJKWa0El1ydLCxK8ZL8mc
bU0ZCS4C8ec5bVISYi/u3S5gXL05YAdVE0Pk3GFOJrXPOXdY3tzVhbibSmnLzJ5W
/yVNw5s0tiMQlPpsoLYS5EBszhucTX9i6Z0oBtjsO6Ak9wPhvTJj7Y8pQQn5dRl/
QhKmnotF8ZqffLbMy2/acwCAbI51ewOofR12LkUtsF8zqjixoA3X0zf4icFPBAHp
18Awk/YnHkC4t25sYWziyiq+3cvn9mjjntlCGWbBVq+APee1wxK9voDQNgrLD0Bi
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271594222042603859717785946392886035909309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-03 13:45:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-01 13:45:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5686589850124288-fe4.pantheonsite.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27739688811893269036016379549165623345384304716432411784997726975904282396557244944884554656982237379757036775920578306420085292108863135456109976823504130306720002816762831772985480182447521425227414873317791342408889987413507450866258682576701709901276326557907494122196374920604025297368966273818165110063927789268983673991101120403710344727157320012776364954666128345090272886739830409733410913763927476572096673582698594697013000416549853567966196866156432234911170324142723152007865427093478266443505797244356280911038797441899530382336871679066660676959221264644310183132745013566615018569898569021232869565141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							219473606e3883d3b7abc0e8ee2018123c90821e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2084 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '25live.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5686589850124288-fe4.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abingdonairandcountry.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminaffairs.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistivetechcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistivetechnologycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistivetechnologycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beanproject.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boost.reachlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budget.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessservices.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityclimateplanner.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityguides.wellandgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cls.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'des.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.beanproject.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drupal.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsstpublicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earlyoutreachprograms.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emph.ucla.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eos-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exechpm.ucla.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facilitymgmt.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialreporting.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialservices.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameday.texasexes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'german-staging.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.test.worldvision.org.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itpolicy.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsecurity.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnreps.library.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'julieyee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lending.accessgroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mllab.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nathanroth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nunn-better.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofm.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.ofm.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onenet.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parking.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payroll.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philadelphiaanimalhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phillyanimalhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policiesandpracticedirectives.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practiceops.weill.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practiceops.weillcornell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procurement.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rehabmed.weill.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'researchgo.ucla.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risksafety.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siec.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapshot.reachlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentfees.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentfinancialservices.humboldt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sxs.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.beanproject.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjhsst.fcps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weillcornellrehab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werbarealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westfieldhs.fcps.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workingsmarter.universityofcalifornia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assistivetechcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assistivetechnologycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assistivetechnologycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beanproject.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boost.reachlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centennial.chinamedicalboard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityguides.wellandgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.des.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsstpublicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exechpm.ucla.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainstreetnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nathanroth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nunn-better.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onenet.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.philadelphiaanimalhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phillyanimalhospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.researchgo.ucla.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siec.wa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studio1062.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stvm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weillcornellrehab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.werbarealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wytec.biz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00506a12e4754e8982738d51dd26bcb7c45f77e06f911f72c102558e711eb764b3bb7d75d0fd5bc8b967cfeb58c063c88913c8f5352deb4aeae2a27d6b0836a39ee81f520594e35f258bb92a58d3dc96a8f0f32da01c2bee458c7fac82e35612cd34e40c783cabc863a78dba9cbbd1e8e0b06ce217b4672d0d823b000c832896559729db423abede10f5fabf849bb5894bb55e3bc763bc1b69ed40dad2a0709fbfaa571d9a65002ff0e5722a959323a09161a203eb94fa9ade0823ce96592a63f680b04f2d89aeec8a3d161df1d4b7ef255af0a17d7252799cf317613a5408cdd9e90480a9ce8c5a89a258a22fb614b5f307ae590e3cba3bc39fa456d1255b73fe