bi.capacityinteractive.com

Issued by R3

About this certificate

This digital certificate with serial number 03:8c:84:54:1b:61:c9:89:5a:47:14:52:10:f8:a9:96:1a:3d was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bi.capacityinteractive.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8c:84:54:1b:61:c9:89:5a:47:14:52:10:f8:a9:96:1a:3d
Serial Number (int): 309152283967964414244102528936844838967869
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 33:e7:c2:40:24:63:e2:ba:9c:41:a0:e6:3e:1b:32:b7:59:f8:ea:6b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 10:91:13:5b:0c:76:3d:b6:5c:34:67:fa:6f:16:01:29:62:73:fb:ae
Fingerprint (sha256): c2:87:3d:10:f0:10:ad:23:e9:a3:e8:0e:cb:e7:6e:ba:1c:1d:84:b3:29:fb:71:bf:af:04:cd:d1:7f:f6:35:34

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bi.capacityinteractive.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bi.capacityinteractive.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bi.artisnaples.org
bi.ballet.ca
bi.balletwest.org
bi.calperformances.org
bi.capacityinteractive.com
bi.cso.org
bi.indianapolissymphony.org
bi.mayoarts.org
bi.naplesplayers.org
bi.o-pa.org
bi.operaphila.org
bi.peopleslight.org
bi.phoenixsymphony.org
bi.pnb.org
bi.roundabouttheatre.org
bi.scottsdalearts.org
bi.scottsdaleperformingarts.org
bi.seattlerep.org
bi.sfopera.com
bi.steppenwolf.org
bi.tafelmusik.org
bi.ticketomaha.com
bi.wilmatheater.org
capacityinteractive.nd.edu

Other certificates including the domain name capacityinteractive.com

(limited to 100 certificates)
behaviorinfuser.capacityinteractive.com
white-label.datorama.com
white-label.datorama.com
bi.operaphila.org
bi.operaphila.org
bi.operaphila.org
bi.operaphila.org
white-label.datorama.com
white-label.datorama.com
bi.operaphila.org
white-label.datorama.com
behaviorinfuser.capacityinteractive.com
capacityinteractive.com
white-label.datorama.com
bi.operaphila.org
www.capacityinteractive.com
bootcamp.capacityinteractive.com
bootcamp.capacityinteractive.com
bi.capacityinteractive.com
capacityinteractive.com
bootcamp.capacityinteractive.com
capacityinteractive.com
white-label.datorama.com
bi.operaphila.org
capacityinteractive.com
bi.operaphila.org
white-label.datorama.com
www.capacityinteractive.com
bi.operaphila.org
capacityinteractive.com
bi.operaphila.org
white-label.datorama.com
bi.operaphila.org
behaviorinfuser.capacityinteractive.com
white-label.datorama.com
bi.operaphila.org
bi.operaphila.org
white-label.datorama.com
white-label.datorama.com
behaviorinfuser.capacityinteractive.com
www.capacityinteractive.com
white-label.datorama.com
bootcamp.capacityinteractive.com
white-label.datorama.com
behaviorinfuser.capacityinteractive.com
bi.operaphila.org
bi.operaphila.org
white-label.datorama.com
bi.operaphila.org
bi.operaphila.org
white-label.datorama.com
www.capacityinteractive.com
bootcamp.capacityinteractive.com
white-label.datorama.com
bi.operaphila.org
bi.capacityinteractive.com
white-label.datorama.com
bi.operaphila.org
bi.operaphila.org
bi.capacityinteractive.com
bi.operaphila.org
white-label.datorama.com
white-label.datorama.com
white-label.datorama.com
white-label.datorama.com
www.capacityinteractive.com
white-label.datorama.com
bi.capacityinteractive.com
white-label.datorama.com
white-label.datorama.com
behaviorinfuser.capacityinteractive.com
white-label.datorama.com
ideas.capacityinteractive.com
bi.operaphila.org
white-label.datorama.com
bi.operaphila.org
white-label.datorama.com
white-label.datorama.com
white-label.datorama.com
capacityinteractive.com
white-label.datorama.com
bootcamp.capacityinteractive.com
bi.capacityinteractive.com
white-label.datorama.com
white-label.datorama.com
bi.operaphila.org
bootcamp.capacityinteractive.com
white-label.datorama.com
bi.operaphila.org
white-label.datorama.com
ideas.capacityinteractive.com
bi.operaphila.org
white-label.datorama.com
bi.capacityinteractive.com
bi.operaphila.org
white-label.datorama.com
bi.operaphila.org
bi.operaphila.org
white-label.datorama.com
reports.capacityinteractive.com

Certificate

The complete raw certificate details for bi.capacityinteractive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHXzCCBkegAwIBAgISA4yEVBthyYlaRxRSEPiplho9MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA4MzExMzAzMDlaFw0yMzExMjkxMzAzMDhaMCUxIzAhBgNVBAMT
GmJpLmNhcGFjaXR5aW50ZXJhY3RpdmUuY29tMIIBojANBgkqhkiG9w0BAQEFAAOC
AY8AMIIBigKCAYEAoTspKU/OdcptPManXvddf9bX5mLfGA6x689CFWufBr8vYd6C
fZuuSoJYlqvuKUIThW6Vy5ZEnlX8MTofBt6uKR1X8FtLJwkdiePNMotUTN9QoPom
uXpk/8rTGx57wBmE+4pgb+3qYrDVPX4Iy+sQy4PBO4d8Qo5EjsOh7/OhU/WUe5D4
5BmYGhpZLKbaMx++g8Ei+mHZOCPk9OhnRl/gubB3uTqp43Af48QIfKaHg+iRNOry
7c0PABodaELEmZih2t5B0WAuZd9tidUARiOLNBZGtxeAZ4gsrAg7rNs0szPiDAv3
A8ZX74IrnFy+yWQDODxEM8D5fUweNRyNELwvpx1RexPB6CFc5W9HUJ8TA5Ikj+9Z
j9MUxxDiM0gvft50l/De3hhBZdzlAOXkizDgkTq4VTjRCAK/7ScniAjkc0fZE5rY
0YnVnWkO2nKsLDhhVl/C3pSxfhwd/eXJ1e0fw+RjggPG4wxEOXjglFGXf+0lKv6d
2i74sudYVV6VEV6BAgMBAAGjggP6MIID9jAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FDPnwkAkY+K6nEGg5j4bMrdZ+OprMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf
r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u
bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIC
AAYDVR0RBIIB9zCCAfOCEmJpLmFydGlzbmFwbGVzLm9yZ4IMYmkuYmFsbGV0LmNh
ghFiaS5iYWxsZXR3ZXN0Lm9yZ4IWYmkuY2FscGVyZm9ybWFuY2VzLm9yZ4IaYmku
Y2FwYWNpdHlpbnRlcmFjdGl2ZS5jb22CCmJpLmNzby5vcmeCG2JpLmluZGlhbmFw
b2xpc3N5bXBob255Lm9yZ4IPYmkubWF5b2FydHMub3JnghRiaS5uYXBsZXNwbGF5
ZXJzLm9yZ4ILYmkuby1wYS5vcmeCEWJpLm9wZXJhcGhpbGEub3JnghNiaS5wZW9w
bGVzbGlnaHQub3JnghZiaS5waG9lbml4c3ltcGhvbnkub3JnggpiaS5wbmIub3Jn
ghhiaS5yb3VuZGFib3V0dGhlYXRyZS5vcmeCFWJpLnNjb3R0c2RhbGVhcnRzLm9y
Z4IfYmkuc2NvdHRzZGFsZXBlcmZvcm1pbmdhcnRzLm9yZ4IRYmkuc2VhdHRsZXJl
cC5vcmeCDmJpLnNmb3BlcmEuY29tghJiaS5zdGVwcGVud29sZi5vcmeCEWJpLnRh
ZmVsbXVzaWsub3JnghJiaS50aWNrZXRvbWFoYS5jb22CE2JpLndpbG1hdGhlYXRl
ci5vcmeCGmNhcGFjaXR5aW50ZXJhY3RpdmUubmQuZWR1MBMGA1UdIAQMMAowCAYG
Z4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAtz77JN+cTbp18jnFulj0
bF38Qs96nzXEnh0JgSXttJkAAAGKS+ewRgAABAMARzBFAiEA6Kmtx9zUSWwrGLXn
2iu0liUfkOCD4BVj0qF0hCXb5rwCIAomBvLgp+ZPMux+Suj1NUlFOtfqgY/StkpY
iUScCW1kAHcA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGKS+ew
WAAABAMASDBGAiEA+hREfgmkYvNs8PxoahW9Z+zdJg0HwieHUCZMv+64WGQCIQCK
roOKW8TNfcyeNyMm5t1w7O3U9D+40/hCrxaTtmrWoDANBgkqhkiG9w0BAQsFAAOC
AQEAg/hL8gNkWUy6DgxaqKfts8s6K6GeXnRBbNldZyFBcFPT2t+T67JyhTs1jYT3
mrJ7289P9QaZJHf8xyt7XVxbREC3rn5Jo4C+xookVd7nJXwCVwyAbaOukJwIAcx+
AHhnwvnI2aZneLw+wQoJNFkTfMnlkELRAra2DzkrxG06xbsoUWgUVwzqTpTT5u4O
UArMxvF7ASru7gBCnPCfuo94bJGYFiEUuEOLw0o0QDwKcSjIALzPGS8/130/dbv4
JPHhelGiOFwtaWhy9ZrGmhW2/NPe/ipMakNUUPODMrzYTqGKkck4/7zhU1Ej2cyL
iX8CCAQ5KRZFwcCg+OVVG8azCQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAoTspKU/OdcptPManXvdd
f9bX5mLfGA6x689CFWufBr8vYd6CfZuuSoJYlqvuKUIThW6Vy5ZEnlX8MTofBt6u
KR1X8FtLJwkdiePNMotUTN9QoPomuXpk/8rTGx57wBmE+4pgb+3qYrDVPX4Iy+sQ
y4PBO4d8Qo5EjsOh7/OhU/WUe5D45BmYGhpZLKbaMx++g8Ei+mHZOCPk9OhnRl/g
ubB3uTqp43Af48QIfKaHg+iRNOry7c0PABodaELEmZih2t5B0WAuZd9tidUARiOL
NBZGtxeAZ4gsrAg7rNs0szPiDAv3A8ZX74IrnFy+yWQDODxEM8D5fUweNRyNELwv
px1RexPB6CFc5W9HUJ8TA5Ikj+9Zj9MUxxDiM0gvft50l/De3hhBZdzlAOXkizDg
kTq4VTjRCAK/7ScniAjkc0fZE5rY0YnVnWkO2nKsLDhhVl/C3pSxfhwd/eXJ1e0f
w+RjggPG4wxEOXjglFGXf+0lKv6d2i74sudYVV6VEV6BAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309152283967964414244102528936844838967869
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-31 13:03:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 13:03:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bi.capacityinteractive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3658941979458468841807298599667868148164489084212556479363600066263318900742240665869833009446748536181607528236689531686251681313505026410423219357848060993485294616363951475255327959882472526950436733111590233845656959495721773659454356888607967386294388821337324213094268115691745692459593982008443842918775501554302238649748433749193846394398477400179798172631950484822224975896135505673804306965538701908379931123783328668490365602199326477550999303060165918838246212705078444816822396717972072011308547797878415654882164445325807378811121494369072258545839216768199406196161050311011197079471116673592528715431745509908810621493116635391832335082090593456682452202777433030156242140754050069286177630421422403230791038815277178448272812961970942489751552170944227814410117341134910526560880367510330051242383019200664797194854704393488294085354765425608557582040050135963615639439671242835374904910720215319201237261953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33e7c2402463e2ba9c41a0e63e1b32b759f8ea6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (503 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.artisnaples.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.ballet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.balletwest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.calperformances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.capacityinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.cso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.indianapolissymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.mayoarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.naplesplayers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.o-pa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.operaphila.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.peopleslight.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.phoenixsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.pnb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.roundabouttheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.scottsdalearts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.scottsdaleperformingarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.seattlerep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.sfopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.steppenwolf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.tafelmusik.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.ticketomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.wilmatheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capacityinteractive.nd.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a4be7b0460000040300473045022100e8a9adc7dcd4496c2b18b5e7da2bb496251f90e083e01563d2a1748425dbe6bc02200a2606f2e0a7e64f32ec7e4ae8f53549453ad7ea818fd2b64a5889449c096d64007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a4be7b0580000040300483046022100fa14447e09a462f36cf0fc686a15bd67ecdd260d07c2278750264cbfeeb858640221008aae838a5bc4cd7dcc9e372326e6dd70ecedd4f43fb8d3f842af1693b66ad6a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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