clubmanager.me

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:17:63:d2:7c:5c:ec:ab:f0:00:28:b9:31:68:00:af:f9:ac was issued on by Let's Encrypt.

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=clubmanager.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:17:63:d2:7c:5c:ec:ab:f0:00:28:b9:31:68:00:af:f9:ac
Serial Number (int): 269296038710766351710872116267268489345452
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:64:65:d8:f5:70:eb:9f:1c:bd:22:8a:d2:a2:94:bb:cd:17:1d:a7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): df:ed:7b:b2:81:99:16:34:53:85:e6:e6:6b:7a:30:bf:ec:33:c3:05
Fingerprint (sha256): d0:78:81:79:c5:ca:70:17:2d:ae:d8:57:1a:b6:df:e4:48:a9:72:ce:93:11:a3:32:0d:bb:97:8b:d4:4b:b8:81

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate clubmanager.me

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clubmanager.me

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afterguard.clubmanager.me
app.tisailing.org
bowtostern.rechub.net
clients-pinfirelabs.clubmanager.me
clients-pinfirestudios.clubmanager.me
clients.pinfirelabs.com
clients.pinfirestudios.com
clover.clubmanager.me
clubmanager.me
connect.youthsailingva.org
demo.clubmanager.me
events.hooferouting.org
events.hooferscuba.org
events.hooferscubaclub.org
events.hoofersns.org
ggyc.rechub.net
hoofers.clubmanager.me
jcx.rechub.net
kiosk.usscmc.rechub.net
layc.rechub.net
lessons.hooferriding.org
lessons.hoofersailing.org
members.hoofermountaineering.org
members.hoofers.org
members.jumpclimbextreme.com
mendotayc.rechub.net
my.mendotayc.org
nbss.clubmanager.me
newportbeachsail.rechub.net
ohvma.rechub.net
outdoor-uw.clubmanager.me
pssi.clubmanager.me
regattapoint.rechub.net
register.yachtxp.com
registration.bowtosternboating.com
registration.regattapoint.org
registration.sailmpls.org
reservations.pugetsoundsailing.com
reserve.sbsail.com
reserve.texassailing.com
rochesteryc.clubmanager.me
sailmpls.clubmanager.me
sailsi.clubmanager.me
sandbox-l.clubmanager.me
sandbox-s.clubmanager.me
sbsail.clubmanager.me
seasafaris.clubmanager.me
secure.hoofers.org
skiing.sandbox.rechub.app
spyc.clubmanager.me
ssc.clubmanager.me
stasail.rechub.net
texas-sailing.clubmanager.me
tisc.clubmanager.me
usscmc.rechub.net
wisconsin-basecamp.clubmanager.me
yachtxp.clubmanager.me
ycsh.rechub.net
ysv.rechub.net

Other certificates including the domain name clubmanager.me

(limited to 100 certificates)
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
www-source.pinfirelabs.com
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
staging.clubmanager.me
clubmanager.me
docs-source.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
clubmanager.me
clover.clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
www-source.pinfirelabs.com
staging.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
*.prod-base-lb.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
*.clubmanager.me
craft-dev.clubmanager.me
clubmanager.me
*.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
updates.clubmanager.me
clubmanager.me
events.hooferouting.org
clover.staging.clubmanager.me
clover.staging.clubmanager.me
clubmanager.me
utils.clubmanager.me
staging.clubmanager.me
*.clubmanager.me
clubmanager.me
clubmanager.me
staging.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clover.staging.clubmanager.me
clover.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
utils.clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
clubmanager.me
updates.clubmanager.me
clubmanager.me
clubmanager.me
pinfirelabs.com

Certificate

The complete raw certificate details for clubmanager.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5zPdqbqAVdS+hRuYfav
TYqtSQ7qMAzTn4SYc6yfA7CML/70h7HnqSUyNs3Cp1vaUEsyAv41bC7arWgQbCaA
Ow14juR7LtqyRz3c6lYxMmAuLKEVio/QNHe0OUx541KjgBB1y6jQnV7qjkIpVzgK
6sbEFBSJ54bFRG4WX5yuUBuZZddpRXi1Z4rrnA7PUp/iHyLYYeowY0YlppH9457o
WfqMh5HWMjGXjxGc6KdAxkNXbb904d9GUN1O8CU2Ph01o8fdQS2Hz5TveDvL307X
SDSZtSCFDPw6Viod1hEsHEf7GezGeddzWvjfeVheI5dBvmXAcGIa68cMj3ym8NmS
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269296038710766351710872116267268489345452
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-11 23:27:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-10 23:27:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clubmanager.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20654169801779237281291024800212061316781979358601082152873986444969579533415466567194231964153066132086346001384502648221969151519034523332225584827611263354754378137385002237856350150516278559333484953272800146048353129823597370285074205518878675009715540924338374670340783930341592271088970204356294066147466493093003957679445530962564757379565799105430405285444024082421064220920023555179196266963176161129515543160486643021920950730715238293542999334974531869084702985815333213639929813043770564658106542250496275579319484739822440551373943203741358036293596546826000718185825155889221522034132037361440512381611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							856465d8f570eb9f1cbd228ad2a294bbcd171da7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1452 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afterguard.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tisailing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowtostern.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients-pinfirelabs.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients-pinfirestudios.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.pinfirelabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.pinfirestudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clover.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.youthsailingva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hooferouting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hooferscuba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hooferscubaclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.hoofersns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggyc.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoofers.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcx.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.usscmc.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'layc.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessons.hooferriding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessons.hoofersailing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.hoofermountaineering.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.hoofers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.jumpclimbextreme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendotayc.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.mendotayc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbss.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newportbeachsail.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohvma.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outdoor-uw.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pssi.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regattapoint.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.yachtxp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.bowtosternboating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.regattapoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.sailmpls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.pugetsoundsailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.sbsail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.texassailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochesteryc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailmpls.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailsi.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-l.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-s.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbsail.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seasafaris.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hoofers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skiing.sandbox.rechub.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spyc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stasail.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texas-sailing.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tisc.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usscmc.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wisconsin-basecamp.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yachtxp.clubmanager.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ycsh.rechub.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ysv.rechub.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001716bc923360000040300473045022064c405a199200cc9d9513fd7ce7bd5ba52ceb1042e7a08fe2424122ff846233c022100f0d2c38f86261b4b179c615f042f412f5c88334b84acbe181a1deb2f14e6bd6a007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001716bc92321000004030047304502201423692d36ba36ce879d102ccc8bef5063d96866d4807c8cc52db829da140c0902210098f4b97b52a87073a2af9855abdd3c268c8a0ae2cc43e6f04a56054a83e2c064
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0046eb0f9e1cafe7002dea70c43653960c32fc7c11802ba734265609116aff9f28ab24e4adab0032bd6aea807120133f190ccf351c5f07dca342a305e59fd5433f41967d8273a61e500510a45c8eae084adf14e94d4f616b2a4764f0fa00b56cf6a939de3f664d946afde68af7b119d89861cdc8d4704616ef2cd8fae7c6b2a512e9cc9896c7075998eaecfb7b88cf666b3d8ff512e7479932c7b9386ca321f15be38cf842a99cd33862a4e5ac44b02662bbd5050607638bb8f88dde53e9fcb42f3252fe49538901b8c232a0b66030d8c81ec6bcdb8a5180721e39d5159397315c888c60fc502a93381f7b2496a13662ef07222fbb249af5295b2a9b1d907ed796