roseville.ptly.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:66:c6:1a:ea:72:30:eb:cf:0c:2b:ba:f4:5d:15:0a:36:65 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=roseville.ptly.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:66:c6:1a:ea:72:30:eb:cf:0c:2b:ba:f4:5d:15:0a:36:65
Serial Number (int): 383421272050991443245023525231957725820517
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 28:8a:c7:da:47:7d:3a:22:97:14:b2:e9:8d:59:a9:8e:71:a1:55:ef
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 37:0c:d4:00:76:8f:95:73:c7:36:e1:91:73:0f:b3:e2:83:4c:ca:e6
Fingerprint (sha256): cb:56:00:4f:4d:bc:b5:e0:43:26:89:52:23:24:41:8a:94:79:21:b9:f2:d3:78:b1:35:79:3f:f9:f2:46:f5:83

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate roseville.ptly.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for roseville.ptly.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2019asba.ptly.com
ack.org.au
agcollegealumni.edu.au
alumni.clarendon.vic.edu.au
alumni.johnxxiii.edu.au
alumni.monte.nsw.edu.au
alumni.sacredheart.wa.edu.au
alumni.stmonicas-epping.com
alumni.ststephens.wa.edu.au
alumni.tts.edu.sg
alumniconnect.org.au
alumnilinc.lincoln.ac.nz
aogu.ascham.nsw.edu.au
ap.ptly.com
apbeta.ptly.com
apsgolf.org.au
artsbeat.myhills.net.au
asba.asn.au
asba2019.ptly.com
asbansw.asn.au
benniesconnect.com
careyevents.ptly.com
careyfundraising.ptly.com
coca.net.au
community.ags.school.nz
community.harrowbeijing.cn
community.roseville.nsw.edu.au
connect.clc.vic.edu.au
connect.lakes.nsw.edu.au
danebankoldgirls.com
emjs.club
emmanuelcollegealumni.net.au
emmanuelevents.ptly.com
events.ags.school.nz
events.ejwhittenfoundation.com.au
events.loreto.vic.edu.au
fosvic.org.au
foundation.tts.edu.sg
ggsfundraising.ptly.com
giving.waverley.nsw.edu.au
glenaeoncommunity.com.au
grammar150th.ags.school.nz
heritage.johnxxiii.edu.au
hutchins.ptly.com
hutchins175th.ptly.com
ippa.iona.wa.edu.au
johnxxiiibusdirectory.ptly.com
jpcalumni.com.au
kcoca.com
kogu.kambala.nsw.edu.au
learninglounge.myhills.net.au
lmeddu.com
maristevents.ptly.com
myhills.net.au
ncoba.com.au
nswdpialumni.org
oba.net.au
ocga.com.au
oiu.org.au
okga.org.au
ola.org.au
oldboys.ccgs.wa.edu.au
oldboys.spc.nsw.edu.au
oldguildfordians.com.au
oldsaints.ascollege.wa.edu.au
omsc.org.au
ormistoncollegealumni.com.au
oscanet.com.au
oscayear12.ptly.com
osfc.ptly.com
ourtgs.com.au
owca.asn.au
pafa.myhills.net.au
palladians.com
paoca.com
pastpupils.loreto.vic.edu.au
pittwaterhouse.com
ptly.com
roseville.ptly.com
scotchevents.ptly.com
scotchosmad.ptly.com
sjcobu.com
sscalumni.com.au
statehighconnect.com.au
statehighevents.com.au
stcathsevents.com.au
stcathsoldgirls.com.au
teara.ags.school.nz
tksobu.com.au
tocalalumni.ptly.com
tohga.myhills.net.au
trinitycommunity.com.au
trinitystudents.ptly.com
tssoldboys.com.au
vivarch.org.au
volunteer.ststephens.wa.edu.au
waverleyevents.ptly.com
wcobu.com.au
xavnet.com.au

Other certificates including the domain name ptly.com

(limited to 100 certificates)
wcobu.com.au
ptlycert7.ptly.com
eu.ptly.com
ptlycert15.ptly.com
ais-alumni.be
ais-alumni.be
ap.ptly.com
ptlycert3.ptly.com
ptlycert9.ptly.com
ais-alumni.be
thebluecoatoldscholars.co.uk
hutchins.ptly.com
ptlycert18.ptly.com
maristevents.ptly.com
maristevents.ptly.com
ptlycert7.ptly.com
eu.ptly.com
*.ptly.com
ap.ptly.com
tocalalumni.ptly.com
hutchins.ptly.com
ptlycert16.ptly.com
ptlycert5.ptly.com
ptlycert16.ptly.com
ptlycert9.ptly.com
ptlycert15.ptly.com
eu.ptly.com
eubeta.ptly.com
ptlycert2.ptly.com
*.ptly.com
ptlycert4.ptly.com
ptlycert18.ptly.com
ais-alumni.be
tocalalumni.ptly.com
ais-alumni.be
lowtherhall.ptly.com
ptlycert15.ptly.com
*.ptly.com
ap.ptly.com
demo.ptly.com
ptlycert2.ptly.com
ap.ptly.com
cert0.ptly.com
cert4.ptly.com
ais-alumni.be
maristevents.ptly.com
asba2017.ptly.com
ptlycert16.ptly.com
ptlycert3.ptly.com
demo.ptly.com
2019asba.ptly.com
ap.ptly.com
cert3.ptly.com
eu.ptly.com
*.ptly.com
ptlycert18.ptly.com
ais-alumni.be
eu.ptly.com
ptlycert8.ptly.com
apbeta.ptly.com
ais-alumni.be
eubeta.ptly.com
maristevents.ptly.com
ptlycert17.ptly.com
ais-alumni.be
eu.ptly.com
ptlycert16.ptly.com
asba2019.ptly.com
ptlycert14.ptly.com
events.loreto.vic.edu.au
ptlycert21.ptly.com
ptlycert1.ptly.uk
ptlycert15.ptly.com
cert1.ptly.com
ap.ptly.com
ptlycert12.ptly.com
ap.ptly.com
emmanuelevents.ptly.com
eu.ptly.com
ptlycert8.ptly.com
ptlycert14.ptly.com
cert0.ptly.com
ptlycert12.ptly.com
myhills.net.au
eu.ptly.com
maristevents.ptly.com
cert1.ptly.com
ptlycert4.ptly.com
ptlycert14.ptly.com
events.loreto.vic.edu.au
ptlycert1.ptly.com
ptly.com
ap.ptly.com
ptlycert7.ptly.com
cert5.ptly.com
cert1.ptly.com
ais-alumni.be
maristevents.ptly.com
internet-alumni.com
cert3.ptly.com

Certificate

The complete raw certificate details for roseville.ptly.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdWYByT8AMp6SZ6bPBPK
j5hVDywrETofLiKzBEvb6UEqH2hYiSnre7PbMEVYa4gXeTvm04ctTEWTbngA5OxE
6UVjGR7ga3Z/wQonKQgXW1+m03tLzWnTiVdzEKF6+lQUZFEKIsXQWqmDFNLCNacs
Mb22DPs560bIHhgz7465+NAbyEoK13RPudnbxV2f+A0Y96izoVHDqSFQu6kNAm7O
2XmsVGnnOsd2IT8xu0pBMPJV2kaJKdLVhTeGqi2EdpiAiCSLwuUbiMNCLKZdHkn1
MchQXdV1bMmwTwJzpnQGfHHv5OQirkU/AhdehEO59RV16FcCDYWYgvwYZEGSZhnL
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383421272050991443245023525231957725820517
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-05 02:03:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-03 02:03:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roseville.ptly.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17904928057688229336239999701506265043698056235009645275475265239798137093967757081512184027977846625444059682067020254645640033129178629587884624253865470793909638517118362691698249554443027620434115050366870750452855632060669553067810348109723160324851029863271021811861816063062274019522509157306004129362356297535391394429441693210213697044292011343494696632503574538877273896029502327757936967193914486012994987815770953525971877832810592498869943500630828525912824302922090796194077016839503510861546215899653444342060676801307411033569431997110286015571922864893374962143398473423999665242784033560904509016971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							288ac7da477d3a229714b2e98d59a98e71a155ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2099 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2019asba.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ack.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agcollegealumni.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.clarendon.vic.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.johnxxiii.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.monte.nsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.sacredheart.wa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.stmonicas-epping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.ststephens.wa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.tts.edu.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumniconnect.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnilinc.lincoln.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aogu.ascham.nsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apbeta.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apsgolf.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artsbeat.myhills.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asba.asn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asba2019.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asbansw.asn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benniesconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careyevents.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careyfundraising.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coca.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.ags.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.harrowbeijing.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.roseville.nsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.clc.vic.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.lakes.nsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danebankoldgirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emjs.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emmanuelcollegealumni.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emmanuelevents.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.ags.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.ejwhittenfoundation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.loreto.vic.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fosvic.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.tts.edu.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggsfundraising.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.waverley.nsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenaeoncommunity.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammar150th.ags.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritage.johnxxiii.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hutchins.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hutchins175th.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ippa.iona.wa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnxxiiibusdirectory.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpcalumni.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kogu.kambala.nsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learninglounge.myhills.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmeddu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristevents.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhills.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncoba.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nswdpialumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oba.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocga.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oiu.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okga.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ola.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldboys.ccgs.wa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldboys.spc.nsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldguildfordians.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldsaints.ascollege.wa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omsc.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ormistoncollegealumni.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oscanet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oscayear12.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osfc.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourtgs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owca.asn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pafa.myhills.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palladians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pastpupils.loreto.vic.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pittwaterhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roseville.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotchevents.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotchosmad.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjcobu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sscalumni.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statehighconnect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statehighevents.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcathsevents.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcathsoldgirls.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teara.ags.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tksobu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tocalalumni.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tohga.myhills.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trinitycommunity.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trinitystudents.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tssoldboys.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivarch.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volunteer.ststephens.wa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waverleyevents.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcobu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xavnet.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b25972a320000040300473045022100b62aefde21bb197a87a161c2f309cad2d43dcfaf70c866f2b068d77bcdc788e30220766d140cee54367f985e3d079fbbbe53f150fc37ec6406f9c7864ee4cca9b932007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b25972a1000000403004630440220224bab6b179e20413ccc6a4c7d8cc45f17bbd9524f69ed2fdad61ecf1135e2b5022030a6cf28f44b22b60412bf61945d8cb1ae03b343b1900b59daaada6b6c4ab827
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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